Cloud Security

A sogou Intranet has Struts2 command execution (discuz! Application Instance) A sogou Intranet has Struts2 command execution (discuz! Application Instance)Detailed description: Http://bizhi.sogou.com/bbs/ is discuz! Vulnerability.Multiple SSRF

Do you believe this? The smartphone may disappear within five years. 1. Do you believe it? The smartphone may disappear within five years. Five years later, Apple may no longer be able to make money by creating a new iPhone. Want to know why?

QEMU pcnet_receive Heap Buffer Overflow Vulnerability (CVE-2015-7504)QEMU pcnet_receive Heap Buffer Overflow Vulnerability (CVE-2015-7504) Release date:Updated on:Affected Systems: QEMU Description: CVE (CAN) ID: CVE-2015-7504QEMU is an open

Linux kernel Denial of Service Vulnerability (CVE-2015-5283)Linux kernel Denial of Service Vulnerability (CVE-2015-5283) Release date:Updated on:Affected Systems: Linux kernel 〈 4.2.3 Description: CVE (CAN) ID: CVE-2015-5283Linux Kernel is the

Oracle Hyperion local vulnerabilities (CVE-2015-4823)Oracle Hyperion local vulnerabilities (CVE-2015-4823) Release date:Updated on:Affected Systems: Oracle Hyperion 11.1.2.3 Description: CVE (CAN) ID: CVE-2015-4823Oracle Hyperion is a solution

Konica Minolta FTP Utility Denial of Service Vulnerability (CVE-2015-7767)Konica Minolta FTP Utility Denial of Service Vulnerability (CVE-2015-7767) Release date:Updated on:Affected Systems: konicaminolta FTP Utility 1.0 Description: CVE (CAN) ID:

EMC SourceOne Email Supervisor hard-coded Password Vulnerability (CVE-2015-6846)EMC SourceOne Email Supervisor hard-coded Password Vulnerability (CVE-2015-6846) Release date:Updated on:Affected Systems: EMC SourceOne Email Supervisor Description:

OS X has been exposed to major vulnerabilities, and Mac is dangerous. Keeper, as its name implies, is a brand new security detection function that Apple has added to OS X Mountain Lion. It can effectively help Mac users guard their machines to

FireEye multi-product virtual execution Engine Memory Corruption VulnerabilityFireEye multi-product virtual execution Engine Memory Corruption Vulnerability Release date:Updated on:Affected Systems: FireEye Malware Analysis System Description:

MediaWiki SemanticForms XSS Vulnerability (CVE-2015-6732)MediaWiki SemanticForms XSS Vulnerability (CVE-2015-6732) Release date:Updated on: 2015-09-02Affected Systems: MediaWiki MediaWiki MediaWiki Description: CVE (CAN) ID:

BitTorrent Bootstrap 'Lazy _ bdecode. cpp 'Remote Code Execution VulnerabilityBitTorrent Bootstrap 'Lazy _ bdecode. cpp 'Remote Code Execution Vulnerability Release date:Updated on:Affected Systems: BitTorrent Description: Bugtraq id: 76098CVE

Linux Kernel Local Denial of Service Vulnerability (CVE-2015-1350)Linux Kernel Local Denial of Service Vulnerability (CVE-2015-1350) Release date:Updated on:Affected Systems: Linux kernel Description: Bugtraq id: 76075CVE (CAN) ID: CVE-2015-13

BitTorrent and uTorrent Remote Code Execution Vulnerability (CVE-2015-5474)BitTorrent and uTorrent Remote Code Execution Vulnerability (CVE-2015-5474) Release date:Updated on:Affected Systems: BitTorrent Description: Bugtraq id: 75968CVE (CAN)

Alarm and event table structure of the alienvault Library As an OSSIM database developer, you need to understand the alarm and event table structure of the alienvault library. 1. alarmFieldTypeAllow NullDefault ValueBacklog_idBinary

CLP Electric Group OA weak password repair improper leakage of Enterprise Information CLP Electric Group OA weak password repair improper leakage of Enterprise Information Code Region http://**.**.**.**/login.do?method=login OA Office System,

Air Security-Sichuan Airlines's alternative brute-force bypass Verification Code (resulting in leakage of internal information) RTDetailed description: High RANK; Sichuan Airlines's MAIL system uses IBM Lotus Domino MAIL Server with verification

[FireEye report] LATENTBOT: Catch me if you have the skills. FireEye recently captured a highly obfuscated code Bot named LatentBot, which has been active since 2013. It has the ability to monitor users without being noticed, and can damage hard

One of Dropbox's Web Security Protection Policies: Content Security Policy (CSP)-based reporting and filtering mechanisms One of Dropbox's Web security protection measures is to use content-based security policies (CSPs ). Devdatta Akhawe, a

Build XSS vectors without letters Requirements Previously, when I was playing an XSS game, I suddenly had some ideas. Based on the sharing principle, I got this article. Here, I will share an XSS attack vector that I have never touched before. At

SQL Injection Based on BIGINT overflow error I am very interested in the new technology of extracting data by mistake in MySQL, and this is a technology introduced in this article. When I checked the integer Processing Method of MySQL, I suddenly