Cloud Security

The scientists issued a warning when they received malicious code from the stars. The malicious code issued a warning. In 2050, the earth received the first interstellar code sent by an alien civilization. An international group of scientists,

Code auditing Overview 0x00 Introduction I have read all the PHP code auditing books written by seay. as a little bit of code auditing, I hope to provide my gains to some people who are just like me, as well as an overall framework and common

WordPress oEmbed Protocol Denial of Service Vulnerability (CVE-2016-5836)WordPress oEmbed Protocol Denial of Service Vulnerability (CVE-2016-5836) Release date:Updated on:Affected Systems: WordPress Description: CVE (CAN) ID:

PHP Arbitrary File read/write Vulnerability (CVE-2015-4598)PHP Arbitrary File read/write Vulnerability (CVE-2015-4598) Release date:Updated on:Affected Systems: PHP PHP 5.6.x PHP 5.5.x Description: CVE (CAN) ID: CVE-2015-4598PHP is a widely

Linux kernel netfilter privilege escalation and Denial of Service Vulnerability (CVE-2016-3134)Linux kernel netfilter privilege escalation and Denial of Service Vulnerability (CVE-2016-3134) Release date:Updated on:Affected Systems: Linux kernel 〈= 4

Apache Cordova iOS arbitrary plug-in Execution Vulnerability (CVE-2015-5208)Apache Cordova iOS arbitrary plug-in Execution Vulnerability (CVE-2015-5208) Release date:Updated on:Affected Systems: Apache Group Cordova iOS Description: CVE (CAN)

Huawei E3276s integrity vulnerability Protection (CVE-2016-3678)Huawei E3276s integrity vulnerability Protection (CVE-2016-3678) Release date:Updated on:Affected Systems: Huawei E3276s USB modems Description: CVE (CAN) ID: CVE-2016-3678Huawei

Siemens SCALANCE S613 Denial of Service Vulnerability (CVE-2016-3963)Siemens SCALANCE S613 Denial of Service Vulnerability (CVE-2016-3963) Release date:Updated on:Affected Systems: Siemens SCALANCE S613 Description: CVE (CAN) ID:

Analysis of remote code execution vulnerability in Baidu Android Browser A few weeks ago, I found a remote code execution vulnerability in Baidu Android browser. At first, I wanted to talk about this topic in Infiltrate this year until I saw the

How to perform security analysis on unknown apps on mobile phones Mobile Anti-Virus Software mostly uses signatures to determine the virus. It cannot be prevented before the virus is intercepted. However, the anti-virus software on the PC end has a

JasPer jpc_pi_nextcprolactin Denial of Service Vulnerability (CVE-2016-1867)JasPer jpc_pi_nextcprolactin Denial of Service Vulnerability (CVE-2016-1867) Release date:Updated on:Affected Systems: University of Victoria JasPer 1.900.1 Description:

Cisco announced it would check whether the software contains backdoor code After Juniper's firewall product NetScreen finds two backdoors, Cisco announced that it would re-examine its software in case it contains backdoor code. The backdoors of

Prevent correct xss posture Xss attacks are common web attacks. If you have not heard of xss attacks, you can first understand the knowledge and principles of xss, such as XSS) "target =" _ blank "rel =" nofollow, noindex ">

SQL Injection and XSS vulnerabilities in a website of Dangdang Love.dangdang.com is a literary page... however, SQL injection and XSS exist, and the database management account is dba without a password .... SQL Injection: sqlmap-u

Jumei youpin's merchant background account system is incomplete and requires token (you can log on to any merchant management background) Imperfect Account System   Http://supplier.ext.jumei.com/index.php? R = site/login &? Request_uri = https % 3

Magento storage xss detailed analysis Affected Versions: Magento CE 0x00 Magento Introduction Magento is a professional open-source e-commerce system. The legendary world's No. 1 e-commerce system. Magento is designed flexibly and has a modular

A System in Tianya has been added to the background management of the Forum for xss blind access. Tianya customer service system has million xss user information, which can be managed in the background of the Forum (users with insufficient customer

Live800 customer service system Arbitrary File Download Vulnerability A vulnerability is detected by hackers. Many large manufacturers are using the vulnerability, which is very harmful. Fuzz generates a downlog. jsp file on the live800 customer

The sofa housekeeping APK application has a general design defect (Remote horse farming or other operations) Rt After the "sofa Guest Manager" APK application is installed, you can directly control the device through the Internet. You can remotely

An unauthorized access to a redis service in the smart server is root (suspected to be a mini-meter cylinder) An unauthorized access to a redis service in the smart server is root (suspected to be a mini-meter cylinder) It is not good to ignore