BIGACE Web CMS Session Fixation Vulnerability

Release date:Updated on: Affected Systems:BigACE 2.7.7BigACE 2.7.6BigACE 2.7.5Description:--------------------------------------------------------------------------------Bugtraq id: 56615Cve id: CVE-2012-5173 BIGACE is a free Web content

Grep integer overflow Heap Buffer Overflow Vulnerability

Release date:Updated on: Affected Systems:Grep greenp 2.11Description:--------------------------------------------------------------------------------Bugtraq id: 57033CVE (CAN) ID: CVE-2012-5667 Grep is a command line tool originally used for Unix

Safari has been exposed to have a serious JavaScript vulnerability.

According to appleinsider, Safari in iOS 6 contains a severe JavaScript vulnerability, which may cause security and privacy problems. The latest iOS 6 includes the "smart App Banner" feature, which allows developers to recommend apps to users on

Opera Web Browser & lt; img & gt; multiple open redirection Vulnerabilities

Release date:Updated on: Affected Systems:Opera Software Opera Web Browser Description:--------------------------------------------------------------------------------Bugtraq id: 57132CVE (CAN) ID: CVE-2012-6467 Opera is a browser from Norway that

Google Chrome cross-site scripting filter Security Bypass Vulnerability

Release date:Updated on: 2013-01-23 Affected Systems:Google Chrome 24Description:--------------------------------------------------------------------------------Bugtraq id: 57474 Google Chrome is a simple and efficient Web browser tool developed by

Drupal Video Module arbitrary PHP Code Execution Vulnerability

Release date:Updated on: Affected Systems:Drupal Video moduleDescription:--------------------------------------------------------------------------------Bugtraq id: 57525 Drupal is an open-source content management platform. Drupal Video 7.

WordPress Poll plug-in "poll_id"/"pollid" SQL Injection Vulnerability

Release date:Updated on: 2013-02-03 Affected Systems:WordPress Poll Plugin 34.xDescription:--------------------------------------------------------------------------------Bugtraq id: 57630 The WordPress Poll plug-in is a fully interactive voting

EA Origin game service platform Arbitrary Code Execution Vulnerability

Release date:Updated on: 2013-03-20 Affected Systems:Origin OriginDescription:--------------------------------------------------------------------------------EA Origin is an online game platform. EA Origin has a security vulnerability in the URI

Havw.cms upload. php File upload Arbitrary Code Execution Vulnerability

Release date:Updated on: 2013-07-13 Affected Systems:Havbid CMS 1.1.7Description:--------------------------------------------------------------------------------Havbid is an open-source lightweight CMS blog program developed based on PHP and SQLite.

PCMan's FTP Server 'stor' Command Buffer Overflow Vulnerability

Release date:Updated on: 2013-08-22 Affected Systems:PCMan FTP Server 2.07Description:--------------------------------------------------------------------------------Bugtraq id: 61840 The PCMan FTP Server is an FTP Server software. When pcman ftp 2.0

Java 6 detects security vulnerabilities. We recommend that you upgrade it to 7 as soon as possible.

Security researchers have called on Oracle Java 6 users to upgrade to Java 7 as soon as possible to avoid being a victim of active network attackers. Timo Hirvonen, a senior analyst at F-secure, issued a security warning on Java 6 on Twitter this

[OpenSSL] source code analysis of the Heartbleed Vulnerability

OpenSSL? Heartbleed vulnerability? Still panic? Calm, calm! After you understand the principles of a vulnerability, you will not fear it any more, or you will treat it more rationally after reading it. This article first introduces what is the

Microsoft Windows Kernel Vulnerability (CVE-2014-1766)

Release date:Updated on: Affected Systems:In Microsoft Windows 8.1Description:--------------------------------------------------------------------------------CVE (CAN) ID: CVE-2014-1766 Windows is a Windows operating system developed by

OpenJDK Security Vulnerabilities (CVE-2014-0462)

Release date:Updated on: Affected Systems:OpenJDKDescription:--------------------------------------------------------------------------------Bugtraq id: 67508CVE (CAN) ID: CVE-2014-0462 OpenJDK is a cooperation Platform for open source

New "heartbleed" attacks target Android and vrouters

Theoretically, this vulnerability allows hackers to intercept communications between Android devices and Wi-Fi routers. We already know that the Android 4.1.1 device is affected by the Heartbleed, but grania claims that iOS and OSX devices may also

Use shell scripts to automatically remotely update Linux servers

This experiment is passed in the Centos/RHEL system. For other versions of linux/Unix, you only need to make appropriate modifications. This script requires that the SSH service must be enabled on the Unix-like server you manage, public and Private

Use login CT in shell script to implement telnet login to vrotelnet

Alibaba CT is based on TCL. As a scripting language, Alibaba CT can achieve automatic interaction (such as passwd, fsck, and telnet) without the participation of administrators ). Secondary CT can also be used to automatically test some applications.

Centos uses DenyHosts to prevent SSH brute force attacks

Nowadays, the Internet is very insecure. Many people use some scanners to scan the ssh port and try to connect to the ssh port for brute-force cracking (brute-force scanning). Therefore, we recommend that you use the vps host space, set a complex

Use the log system to protect Linux security

This article describes how to use the log subsystem and Its commands in Linux to better protect system security. The log sub-system in Linux is very important for system security. It records various daily events of the system, including those users

Use iptables in CentOS to restrict access from specific IP addresses only

We often need to impose some security restrictions when configuring the linux server, such as only allowing specific IP address segments to access the specified port. For example, I have a server with dual-IP addresses that can be accessed from both

Total Pages: 1330 1 .... 396 397 398 399 400 .... 1330 Go to: GO

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.