Cloud Security

MyWebSQL 'index. php' Cross-Site Scripting Vulnerability Released on: 2014-09-03Updated on: 2014-09-04 Affected Systems:MyWebSQL 3.4Description:--------------------------------------------------------------------------------Bugtraq id: 69553CVE (CAN)

Perl Clipboard module 'clipedit. pl' insecure temporary File Processing Vulnerability Release date:Updated on: Affected Systems:Perl Clipboard 0.13

ManageEngine arbitrary topcentral Arbitrary File Upload Vulnerability (CVE-2014-5007) Release date:Updated on: 2014-09-03 Affected Systems:ManageEngine implements topcentral 8-9 build 90054Description:-----------------------------------------------

Linux Kernel "hfs_mac2asc ()" Local Privilege Escalation Vulnerability Release date: 2011-11-21Updated on: 2011-11-22 Affected Systems:Linux kernel

View Linux File security from an emergency responseThe cause of the event is simple. A website page is tampered. The customer's requirement is also very simple. Delete the page that has been tampered. We can imagine that if you can simply delete it,

Attack Android injection 5In Android, almost all IPC communication is through the Binder. It can be said that the Binder occupies a very important position in Android. IPC communication generally involves two parts: client and server. on Android,

Fragment injection of Android framework attacks To adapt to the increasing screen size of devices, Android introduced the Fragment concept after 3. X to display multiple activities on one screen at the same time to make full use of the screen. For

OpenSSL DTLS Remote Denial of Service Vulnerability (CVE-2014-3510) Release date:Updated on: Affected Systems:OpenSSL Project OpenSSL Description:--------------------------------------------------------------------------------Bugtraq id: 69082CVE

OpenStack Horizon Web Name HTML Injection Vulnerability (CVE-2014-3474) Release date:Updated on: Affected Systems:Openstack OpenStack Dashboard

Malicious programs target Apache and hijack 20 thousand websites The malicious program tool named Darkleech is targeting the most popular Web server Apache and redirecting viewers to a third-party malicious website by embedding malicious code on

Remote Code Execution Vulnerability (CVE-2014-3248) for multiple Puppet Products) Release date:Updated on: Affected Systems:Puppet Labs PuppetDescription:--------------------------------------------------------------------------------Bugtraq id: 68

Release date:Updated on: Affected Systems:IrfanView Formats Plug-in 4.36Description:--------------------------------------------------------------------------------Bugtraq id: 64385CVE (CAN) ID: CVE-2013-3944 IrfanView is a fast and free Image

Release date:Updated on: Affected Systems:Open-xchange Open-Xchange Server 7.4.0Description:--------------------------------------------------------------------------------CVE (CAN) ID: CVE-2013-6997 Open-Xchange Server is a part of Open-source

Release date:Updated on: Affected Systems:Cells Blog 3.3Description:--------------------------------------------------------------------------------Bugtraq id: 65094 Cells Blog 3.3 and other versions do not effectively filter users. php, errmsg.

Release date:Updated on: Affected Systems:Wireshark 1.8.0-1.8.12Wireshark 1.10.0-1.10.5Description:--------------------------------------------------------------------------------Bugtraq id: 66070CVE (CAN) ID: CVE-2014-2282 Wireshark is the most

Release date:Updated on: Affected Systems:OpenSSH Description:--------------------------------------------------------------------------------CVE (CAN) ID: CVE-2014-2653 OpenSSH is an open-source implementation of the SSH protocol. In OpenSSH 6.6

WiFi traffic hijacking-any page can be poisoned!Everyone knows that Wi-Fi in public places is very poor, but it is not clear how poor it is. Most people think that it will be okay if they do not go to QQ or log on to the website account. There

How to buy IPS: select an IPS device Today's network threats are becoming increasingly severe, and various new types of intrusion attacks are rampant. For example, the previous OpenSSL vulnerability once caused alarms to Internet users. In the face

The previous article explains the attack and defense practices of the hook program, and implements a monitoring solution for the Framework page, which will protect all subpages. So far, our protection depth is almost the same, but the breadth is

Does mysql injection bypass stress-free commit http://demo.74cms.com/plus/ajax_common.php? Act = hotword & query = comment 'Union + select + 1, group_concat % 28admin_name, 0x3a, pwd, 0x3a, pwd_hash % 29,3 + from + qs_admin % 23 was intercepted,