Cloud Security

Microsoft Silverlight Information Leakage Vulnerability (CVE-2015-6165) (MS15-129)Microsoft Silverlight Information Leakage Vulnerability (CVE-2015-6165) (MS15-129) Release date:Updated on:Affected Systems: Microsoft Silverlight Description:

ESpace unified gateway Denial of Service Vulnerability (CVE-2015-8083) Release date:Updated on:Affected Systems: ESpace U1981 eSpace U1980 eSpace U1960 eSpace U1930 eSpace U1911 eSpace U1910 Description:

PNG Image Processing Library libpng exposed vulnerability, which has been preliminarily fixed The image processing Library libpng has revealed a vulnerability and needs to be repaired as soon as possible. The biggest problem is that, the popularity

Oracle Agile PLM component Remote Security Vulnerability (CVE-2015-4917)Oracle Agile PLM component Remote Security Vulnerability (CVE-2015-4917) Release date:Updated on:Affected Systems: Oracle Agile PLM 9.3.4 Description: CVE (CAN) ID: CVE-201

OpenStack Neutron Security Restriction Bypass Vulnerability (CVE-2015-5240)OpenStack Neutron Security Restriction Bypass Vulnerability (CVE-2015-5240) Release date:Updated on:Affected Systems: openstack Neutron openstack Neutron

Qolsys IQ Panel hardcoded Key Vulnerability (CVE-2015-6032)Qolsys IQ Panel hardcoded Key Vulnerability (CVE-2015-6032) Release date:Updated on:Affected Systems: Qolsys IQ Panel Description: CVE (CAN) ID: CVE-2015-6032Qolsys IQ Panel is an

PHP Multiple Remote Code Execution Vulnerabilities (CVE-2015-6834)PHP Multiple Remote Code Execution Vulnerabilities (CVE-2015-6834) Release date:Updated on:Affected Systems: PHP PHP Unaffected system: PHP PHP 5.x Description: Bugtraq id: 76649CVE (

PHP 'php _ var_unserialize () 'function re-exploits the remote code execution vulnerability after it is releasedPHP 'php _ var_unserialize () 'function re-exploits the remote code execution vulnerability after it is released Release date:Updated

Mail.qq.com DOM XSS First, we found a getcontent http://mail.qq.com/cgi-bin/readtemplate?t=compose✓=false&getcontenturl=http://mail.qq.com/test View called

Android JSON data parsingSoftware and hardware environment Macbook Pro MGX 72 Android Studio 1.3.2 Genymotion Simulator Preface Today, few apps do not deal with servers. In lightweight communication, JSON (JavaScript Object Notation) and XML,

Analysis of SpyderSec challenge solving ideas   The challenge we are going to solve today is very interesting. It is called SpyderSec. We will build it on the VirtualBox Virtual Machine and open Nmap. After Nmap scans, it will only open port 80. In

Loose Account Control of an important system in Ganji results in leakage of a large amount of internal information (affecting multiple internal sites) and Solutions There is a donkey,But never ride.House searchingJob SearchFind DecorationLook for a

The writeup of several "three white hats" Competitions Since the advent of the three white hats, I have received a few small competitions based on "Three white hats" and I have also made several questions. Writeup is not all a common problem. Here I

Phpcmsv9 injection 0-day analysis According to the video, I learned that the injection is from the check_new function in phpcms/modules/message/classes/message_tag.class.php. Public function check_new () {$ where = array ('send _ to_id '=> $ this-> _

Second wave of ASP. NET Website intrusion 1. upload code page I uploaded the ashx page. 2. Use the text on the ashx page to display the web. Config content to get the database connection, 3. Use ashx to output the vbs script in the root directory of

Mssql with error injection example MySQL has an explicit error injection and MSSQL. This article describes MSSQL's explicit error injection.The number of statements is relatively small. You can understand and apply the statements yourself.Sub. php?

Yisaitong data leakage protection system SQL Injection Vulnerability (no DBA permission required)   SQL Injection exists on the WAP logon page of the DLP System (no DBA permission required)    POST /CDGServer3/3g/LoginAction HTTP/1.1Host: 116.213.17

Javascript Cache Poisoning learning and practice 0x00 cause Not long ago, I bought a wooyun wifi and talked about Cache Poisoning: Then we can see the description of wooyun wifi: By default, this function comes with the cache poisoning function.

ThinkPHP webshell skills Someone on 90sec asked, I said there are still some tips that can't be used. I noticed when I audited TP last year. I simply analyzed the code and operation process. The I function of thinkphp is the function for processing

PHP security prevents exposure of your source code or important configuration information The current project is to put all the contained files under the main directory, such: The website directory is public. All the source code and configuration