Cloud Security

The NTP service process has fixed a major security vulnerability. Please upgrade it as soon as possible. US-CERT disclosed that a large number of security defects have been found in ntpd recently. Ntpd is a service process of Network Time Protocol

Linux kernel fs/pipe. c Denial of Service Vulnerability (CVE-2016-2847)Linux kernel fs/pipe. c Denial of Service Vulnerability (CVE-2016-2847) Release date:Updated on:Affected Systems: Linux kernel 〈 4.5 Description: CVE (CAN) ID:

Miui rom has the "" vulnerability to obtain system permissions, text messages, passwords, and other important data. All miui rom versions on Xiaomi official website have system permission vulnerabilities. Any APK can exploit this vulnerability to

Libpng 'pngwutil. c' Remote Code Execution Vulnerability (CVE-2015-8540)Libpng 'pngwutil. c' Remote Code Execution Vulnerability (CVE-2015-8540) Release date:Updated on:Affected Systems: Libpng 1.5.x Libpng 1.4.x Libpng 1.3.xLibpng 1.2.x Libpng 1.1

Huawei Policy Center SQL Injection Vulnerability (CVE-2016-3675)Huawei Policy Center SQL Injection Vulnerability (CVE-2016-3675) Release date:Updated on:Affected Systems: Huawei Policy Center Description: CVE (CAN) ID: CVE-2016-3675The Huawei

Apache Ranger Security Restriction Bypass Vulnerability (CVE-2016-0735)Apache Ranger Security Restriction Bypass Vulnerability (CVE-2016-0735) Release date:Updated on:Affected Systems: Apache Group Ranger 0.5.x Description: CVE (CAN) ID: CVE-2

Apple iOS Profiles Spoofing Vulnerability (CVE-2016-1766)Apple iOS Profiles Spoofing Vulnerability (CVE-2016-1766) Release date:Updated on:Affected Systems: Apple iOS Description: CVE (CAN) ID: CVE-2016-1766IOS is an operating system

Foxit PhantomPDF after The ListBox value is released, the remote code execution vulnerability is reused.Foxit PhantomPDF after The ListBox value is released, the remote code execution vulnerability is reused. Release date:Updated on:Affected

PC re compile_branch Stack Buffer Overflow Vulnerability (CVE-2016-3191)PC re compile_branch Stack Buffer Overflow Vulnerability (CVE-2016-3191) Release date:Updated on:Affected Systems: PCRE 8.x Description: CVE (CAN) ID: CVE-2016-3191PCRE

HPE ArcSight ESM information leakage (CVE-2016-1992)HPE ArcSight ESM information leakage (CVE-2016-1992) Release date:Updated on:Affected Systems: HP ArcSight ESM Description: CVE (CAN) ID: CVE-2016-1992HP ArcSight ESM is an enterprise

The latest most common tool for Linux Shell Text ProcessingGuideThis article describes the most common tools for using Shell to process text in Linux: find, grep, xargs, sort, uniq, tr, cut, paste, wc, sed, awk; the examples and parameters provided

Vulnerability Analysis of CVE-2016-0059 IE information leakage0x00 Summary This article will carry on the deep analysis to the CVE-2016-0059, this vulnerability is caused by the Microsoft Hyperlink Object Library memory data leakage, the successful

Design defects/brute-force cracking + large-scale credential stuffing The problem is found at personal center> basic Settings> modify email address:Packet Capture analysis:The normal business logic here should be to verify the current user's

Threat intelligence basics: crawling, walking, and analysis (Part 3) This is the last article (1 and 2) of the threat intelligence basic trilogy. This article will continue to discuss how threat intelligence is implemented in security

Pseudo-static SQL injection (with verification script) exists in a station in flush) Pseudo-static SQL injection at a site in huashun The injection point is http://data.10jqka.com.cn/ifyyb/yybstockxt/code/600811/date/1?input parameter. The asterisk

163 leakage of the online storage service mailbox can cause any User Password Reset Vulnerability RT: I forced the vendor to write a mistake yesterday. Face it. Due to some negligence, all emails sent to the 163 Network Disk are disclosed, which can

Profiling SSTI in Flask/Jinja2 AnalysisPart 1 If you have never heard of a server template injection (SSTI) attack, or do not know much about it, you are advised to read this article written by James Kettle before continuing to read this article. As

Exploration of server template injection in Flask/Jinja2 (1) If you haven't heard of SSTI (server-side template injection) or do not know enough about it, we suggest you read an article written by James Kettle before that.As a professional security

A website in HC has the SQL injection vulnerability involving more than 20 thousand user data entries. A website in HC has the SQL injection vulnerability, involving more than pieces of user data. Continued: WooYun-2016-173045The Operating Analysis

9 Yang Intranet roaming caused by a Vulnerability (password needs to be filtered) Fix Reference:Http://wooyun.org/bugs/wooyun-2010-0141195 based on previous VulnerabilitiesThe account has been filtered out. The password is still not filtered