Cloud Security

Linux kernel Privilege Escalation Vulnerability (CVE-2015-7613)Linux kernel Privilege Escalation Vulnerability (CVE-2015-7613) Release date:Updated on:Affected Systems: Linux kernel 〈 4.2.3 Description: CVE (CAN) ID: CVE-2015-7613Linux Kernel is

OpenStack Neutron Security Restriction Bypass Vulnerability (CVE-2015-5240)OpenStack Neutron Security Restriction Bypass Vulnerability (CVE-2015-5240) Release date:Updated on:Affected Systems: openstack Neutron openstack Neutron

Siemens ruggedcom ros sensitive information leakage (CVE-2015-7836)Siemens ruggedcom ros sensitive information leakage (CVE-2015-7836) Release date:Updated on:Affected Systems: Siemens RuggedCom ROS Description: CVE (CAN) ID:

WinRAR SFX v5.21 Remote Code Execution VulnerabilityWinRAR SFX v5.21 Remote Code Execution Vulnerability Release date:Updated on:Affected Systems: WinRar WinRar 5.21 Description: WinRAR is a popular compression/decompression tool.The Text and Icon

Wind River VxWorks Integer Overflow VulnerabilityWind River VxWorks Integer Overflow Vulnerability Release date:Updated on:Affected Systems: Wind River Systems VxWorks 5.5-6.9.4.1 Description: VxWorks is a real-time operating system widely

Openfire 3.10.2 CSRF Vulnerability (CVE-2015-6973)Openfire 3.10.2 CSRF Vulnerability (CVE-2015-6973) Release date:Updated on:Affected Systems: Openfiler Openfiler 3.10.2 Description: CVE (CAN) ID: CVE-2015-6973Openfire is a real-time Collaboration

PHP Multiple Remote Code Execution Vulnerabilities (CVE-2015-6834)PHP Multiple Remote Code Execution Vulnerabilities (CVE-2015-6834) Release date:Updated on:Affected Systems: PHP PHP Unaffected system: PHP PHP 5.x Description: Bugtraq id: 76649CVE (

PHP 'php _ var_unserialize () 'function re-exploits the remote code execution vulnerability after it is releasedPHP 'php _ var_unserialize () 'function re-exploits the remote code execution vulnerability after it is released Release date:Updated

FFmpeg decode_ihdr_chunk DoS Vulnerability (CVE-2015-6818)FFmpeg decode_ihdr_chunk DoS Vulnerability (CVE-2015-6818) Release date:Updated on:Affected Systems: FFmpeg FFmpeg Description: CVE (CAN) ID: CVE-2015-6818FFmpeg is a free software that

MediaWiki SemanticForms XSS Vulnerability (CVE-2015-6731)MediaWiki SemanticForms XSS Vulnerability (CVE-2015-6731) Release date:Updated on: 2015-09-02Affected Systems: MediaWiki MediaWiki MediaWiki Description: CVE (CAN) ID:

Attackers intrude into the Bugzilla to access undisclosed bugs. Mozilla issued a warning that an attacker steals sensitive undisclosed vulnerabilities from its bug Tracking System Bugzilla and may exploit the vulnerability information to attack

PHP 'zend _ HASH_IF_FULL_DO_RESIZE () 're-exploits the memory corruption vulnerability after being releasedPHP 'zend _ HASH_IF_FULL_DO_RESIZE () 're-exploits the memory corruption vulnerability after being released Release date:Updated on:Affected

Linux Kernel Local Denial of Service Vulnerability (CVE-2015-1350)Linux Kernel Local Denial of Service Vulnerability (CVE-2015-1350) Release date:Updated on:Affected Systems: Linux kernel Description: Bugtraq id: 76075CVE (CAN) ID: CVE-2015-13

Second wave of ASP. NET Website intrusion 1. upload code page I uploaded the ashx page. 2. Use the text on the ashx page to display the web. Config content to get the database connection, 3. Use ashx to output the vbs script in the root directory of

Yisaitong data leakage protection system SQL Injection Vulnerability (no DBA permission required)   SQL Injection exists on the WAP logon page of the DLP System (no DBA permission required)    POST /CDGServer3/3g/LoginAction HTTP/1.1Host: 116.213.17

Javascript Cache Poisoning learning and practice 0x00 cause Not long ago, I bought a wooyun wifi and talked about Cache Poisoning: Then we can see the description of wooyun wifi: By default, this function comes with the cache poisoning function.

ThinkPHP webshell skills Someone on 90sec asked, I said there are still some tips that can't be used. I noticed when I audited TP last year. I simply analyzed the code and operation process. The I function of thinkphp is the function for processing

CTF organizer's guide against zombies 0x00 background XDCTF2015 is a CTF that I think is very powerful. The problem is moderately difficult and there is nothing wrong with it. It has ended successfully. CTF has always been easy to get confused.

SQL injection vulnerability in tianrongxin Server Load balancer SQL injection vulnerability in tianrongxin Server Load balancer The command execution has been completed, and two SQLite injection vulnerabilities are proposed without logon. This

Multiple linked payment servers have the Arbitrary File Upload Vulnerability (getshell) Multiple linked payment servers have the Arbitrary File Upload Vulnerability (getshell) 1. http://weixin.allinpay.com/  Uploaded  The execution is successful,