Cloud Security

Debian reportbug Software Package Remote Command Execution Vulnerability (CVE-2014-0479) Release date:Updated on: Affected Systems:Debian reportbugDescription:--------------------------------------------------------------------------------Bugtraq

Baidu browser xss can be hijacked 1. Cause of the VulnerabilityThe problem lies in bdbrowser: // tabpage/. When you click "manually edit", the top 8 of "most frequently accessed" appears. As a result, the title of the webpage is not encoded and is

Multiple security vulnerabilities in Google Chrome versions earlier than 22.0.1229.92 Release date: 2012-10-08Updated on: Affected Systems:Google Chrome

ECshop history patch new backdoor Vulnerability Release date:Updated on: Affected Systems:ECShop 273utf8_patch006Description:--------------------------------------------------------------------------------ECSHOP is an open-source online shop

Linux Kernel Local Privilege Escalation Vulnerability (CVE-2014-5045) Release date:Updated on: Affected Systems:Linux kernelDescription:--------------------------------------------------------------------------------Bugtraq id: 68862CVE (CAN) ID:

Spoon signature verification security measure Bypass Vulnerability Release date:Updated on: 2014-06-07 Affected Systems:Perl-Spoon perl-spoke 0.24Description:--------------------------------------------------------------------------------Bugtraq

1. To create a secure virtual host, in the asp + SQL environment, we need to block ASP webshell. Block the serv-u Elevation of Privilege Vulnerability and the threat of SQL injection. 2. by default, the webshell function installed on the Windows

Nowadays, computer viruses are changing with each passing day, which is a helpless choice for every computer user. After a long period of detection and removal, the virus is gone, and the troubles are also followed. Either a file loss error or a

Squid proxy string processing Null Pointer Reference Vulnerability Release date: 2010-09-03Updated on: 2010-09-07 Affected Systems:Squid Web Proxy Cache 3.2Squid Web Proxy Cache 3.1Squid Web Proxy Cache 3.0Unaffected system:Squid Web Proxy Cache 3.2.

Release date:Updated on: Affected Systems:UMPlayer 0.98.Description:--------------------------------------------------------------------------------CVE (CAN) ID: CVE-2013-3494 UMPlayer is a fully functional multimedia player. UMPlayer 0.98 and

Release date:Updated on: Affected Systems:Google Caja r5631Description:--------------------------------------------------------------------------------Bugtraq id: 63899 Google Caja is a security tool that embeds third-party HTML, CSS, and

Release date:Updated on: Affected Systems:PHP 5.5.xPHP 5.4.xPHP 5.3.xDescription:--------------------------------------------------------------------------------Bugtraq id: 64225CVE (CAN) ID: CVE-2013-6420 PHP is an embedded HTML language. When

Release date:Updated on: Affected Systems:Nisuta NS-WIR150 Wireless Routers 5.07.41Nisuta NS-WIR300 Wireless Routers 5.07.36 _ NIS01Description:--------------------------------------------------------------------------------Nisuta NS-WIR150/NS-WIR300

Release date:Updated on: Affected Systems:Google Chrome Google Chrome Description:--------------------------------------------------------------------------------Bugtraq id: 66239CVE (CAN) ID: CVE-2014-1705 Google Chrome is a Web browser tool

Release date:Updated on: Affected Systems:Apache Group Apache HTTP Server Description:--------------------------------------------------------------------------------Bugtraq id: 66303CVE (CAN) ID: CVE-2013-6438, CVE-2014-0098 Apache HTTP Server is

Amazing technology: using php socket5 proxy for Intranet penetration testing During penetration testing, we often encounter webshells, but webserver provides web services through web port ing on the Intranet. If you have protection software that

Mobile phone cool dog DLNA scans the PC with the DLNA function on the LAN, and directly obtains the control of the cool dog music on the PC without any authorization.   Solution: 1. When releasing software, set the DLNA of codoy to

Attackers use xmlrpc. php to crack WordPress. In recent days, wordpress community members reported that they were under brute-force attack by using "title =" \ "> xmlrpc. php. Using the interface provided by xmlrpc. php, you can try to guess your

Use the security class provided by CI to prevent cross-site requests from adding hidden fields to the form. First we see the document: http://codeigniter.org.cn/user_guide/libraries/security.htmlThe last few lines are described as follows:Cross-site

The Cross-Site Scripting filtering rules of the mail body are not complete, and thus the email body is bypassed. Test 1: result 1: minimize the test content and identify the root cause of the problem. Test 2: result 2: determine pseudo ": "The