Cloud Security

Kolibri buffer overflow vulnerability in CVE-2014-5289) Release date: Updated on:   Affected Systems: SENKAS Kolibri WebServer 2.0 SENKAS Kolibri WebServer Description: Bugtraq id: 69263 CVE (CAN) ID: CVE-2014-5289   Kolibri is a simple HTTP server

Apache Cordova For Android Information Leakage Vulnerability (CVE-2014-3502) Release date:Updated on: Affected Systems:Apache Group Cordova Description:--------------------------------------------------------------------------------Bugtraq id:

MySQL and MariaDB Geometry query Denial of Service Vulnerability Release date:Updated on: 2013-03-18 Affected Systems:MySQL AB MySQLDescription:--------------------------------------------------------------------------------Bugtraq id: 58511CVE (CAN)

Wireshark Multiple Vulnerabilities (MDVSA-2014: 050) Release date:Updated on: Affected Systems:Wireshark 1.8.0-1.8.12Wireshark 1.10.0-1.10.5Description:--------------------------------------------------------------------------------CVE (CAN) ID: CVE-

Trusted Boot 'loader. c' Security Bypass Vulnerability Release date:Updated on: Affected Systems:Trusted BootDescription:--------------------------------------------------------------------------------Bugtraq id: 68960CVE (CAN) ID:

Linux Kernel "lz4_uncompress ()" Integer Overflow Vulnerability Release date:Updated on: Affected Systems:Linux kernel 3.15.1Linux kernel 3.14.8Linux kernel 3.12.23Description:--------------------------------------------------------------------------

Monkey HTTP Daemon 'dirlisting' plug-in Cross-Site Scripting Vulnerability Release date:Updated on: 2013-06-19 Affected Systems:Monkey HTTP Daemon 0.9.3Monkey HTTP Daemon 0.8.2Monkey HTTP Daemon 0.8.1Monkey HTTP Daemon 0.8Monkey HTTP Daemon

Open-Xchange AppSuite XML external entity information leakage Vulnerability Release date:Updated on: Affected Systems:Open-xchange Open-Xchange Server 7.4.1Description:--------------------------------------------------------------------------------

Oracle MySQL Server Remote Vulnerabilities (CVE-2014-4260) Release date:Updated on: Affected Systems:Oracle MySQL Server Oracle MySQL Server Description:--------------------------------------------------------------------------------Bugtraq id: 68573

Cisco uniied Customer Voice Portal insecure TomCat configuration vulnerability Release date:Updated on: 2013-05-10 Affected Systems:Cisco CVP 7.xCisco CVP 4.1.xCisco CVP 4.0.xDescription:---------------------------------------------------------------

Install and set Gufw-ufw GUI firewall in Ubuntu 8.10 [multi-figure] Gufw-ufw graphic interface firewall, customized for Ubuntu, deb installation package is easy, in addition, it can be automatically started with the Ubuntu 8.10 system, the full

Remote Privilege Escalation Vulnerability (CVE-2014-4046) for multiple Asterisk Products) Release date:Updated on: Affected Systems:Asterisk Open

GnuPG 'compress. c' DoS Vulnerability Release date:Updated on: Affected Systems:GnuPG GnuPGDescription:--------------------------------------------------------------------------------Bugtraq id: 68156 GnuPG is a PGP encryption, decryption, and

GitList remote code execution vulnerability in CVE-2014-4511) Release date:Updated on: Affected Systems:GitList GitListDescription:--------------------------------------------------------------------------------Bugtraq id: 68253CVE (CAN) ID: CVE-2014

How hackers bypass IDS for Buffer Overflow As a heavyweight product of enterprise security protection, IDS naturally becomes a target for hackers to crack. It turns out that bypassing IDS protection is completely feasible. The next article will

CentOS Server Security Settings We must understand: Minimum permissions + minimum services = maximum security Therefore, whether it is to configure any server, we must disable unused services and set system permissions to the minimum level so as to

PageAdmin CMS latest SQL Injection PageAdmin CMS latest SQL Injection The log saving function of the system does not filter IP addresses, leading to the SQL injection vulnerability.  // PageAdmin.Logpublic void Save(int SiteId, int IsMaster, string

Code Auditing: Two getshells and two interesting vulnerabilities in the eyou email system Recently, I conducted a penetration test on a company with a market value of over 10 billion US dollars. I found that one of the domain names uses the Yiyou

Network settings after cloning a VM from VMware After cloning a virtual machine Through VMware, the new virtual machine often does not correctly identify the NIC and needs to be reconfigured.The following is an example of network reconfiguration in

Facebook experienced large-scale downtime on Thursday, with the affected users covering the world. Facebook went down for about 40 minutes. Twitter users complained about Facebook's downtime on the social networking site. When a user logs on to the