Cloud Security

Internet Explorer detects a high-risk vulnerability that steals logon creden Internet Explorer with all patches has been found to have a vulnerability that allows attackers to steal logon creden。 and inject malicious content into browsing sessions.

Apache ActiveMQ Apollo XML external entity Injection Vulnerability (CVE-2014-3579) Release date:Updated on: Affected Systems:Apache Group ActiveMQ ApolloDescription:Bugtraq id: 72508CVE (CAN) ID: CVE-2014-3579 Apache ActiveMQ Apollo is a simple,

The GHOST vulnerability may affect WordPress and PHP applications. Last week, Glibc found a heap buffer overflow vulnerability called GHOST that can be remotely exploited. The vulnerability has been fixed by the upstream, however, some downstream

BusyBox Local Security Restriction Bypass Vulnerability (CVE-2014-9645) Release date:Updated on: Affected Systems:BusyBoxDescription:Bugtraq id: 72324CVE (CAN) ID: CVE-2014-9645 BusyBox is an executable implementation of many standard Linux tools.

Umbraco CMS TemplateService component update Function Arbitrary Code Execution Vulnerability Release date:Updated on: Affected Systems:Umbraco CMS Description:CVE (CAN) ID: CVE-2013-4793 Umbraco is an open source CMS Content Management system. It is

SQL Server Stored Procedure Hacking (I) trusted Database SQL Server allows DBA (Database Administrator) to set up trusted databases. In short, a trusted database can access external resources, such as network sharing, email functions, and objects in

WordPress WP Symposium plug-in Arbitrary File Upload Vulnerability Release date:Updated on: Affected Systems:WordPress WP Symposium Description:WordPress WP Symposium plug-in is a network plug-in that adds social functions. WP Symposium 14.11 and

HTTP Vulnerability in Allied Telesis AR routers and alpolicware Switches Release date:Updated on: Affected Systems:Allied Telesyn AR Router AR750S-DPAllied Telesyn AR Router AR750SAllied Telesyn AR Router AR745Allied Telesyn AR Router AR442SAllied

GNU glibc 'getanswer _ r () 'function infinite loop Denial of Service Vulnerability Release date:Updated on: Affected Systems:GNU glibc 2.xDescription:Bugtraq id: 71670 Glibc is the implementation of C libraries in most Linux operating systems.

X. Org X Server DoS Vulnerability Release date:Updated on: Affected Systems:X.org X11Description:Bugtraq id: 71597CVE (CAN) ID: CVE-2014-8091 X. Org Server is the official reference implementation of X Window System. It is an open-source free

GitLab not affected by Git Security Vulnerabilities CVE-2014-9390 Yesterday, Git reported a serious security vulnerability. This vulnerability affects all official Git Client versions. Due to this vulnerability, git.oschina.net, GitLab.com, GitLab

Apache CloudStack unauthenticated LDAP Binding Vulnerability Release date:Updated on: Affected Systems:Apache Group CloudStack Apache Group CloudStack Description:CVE (CAN) ID: CVE-2014-7807 Apache CloudStack is an open source software for

An Android mobile phone can be captured by any application and its solution without the need of root Some Android applications have screenshot functions. However, the screenshot function requires the root permission. These applications cannot take

Man-in-the-middle attack caused by improper handling of TLS certificates by the Cheetah and 2345 browsers When the SSL/TLS certificates provided by the https web pages opened by the two browsers are invalid (such as self-Signed and Domain Name

Android Broadcast Security0x00 Popular Science Broadcast Recevier is a component that focuses on receiving and processing Broadcast notifications. Many broadcasts originate from system code, such as notifying time zone changes, low battery, taking

Testing the return of an asp Trojan Horse Backdoor A hacker posted a post on our blacklist forum a few days ago.Is sharing a no-kill asp TrojanHowever, I am often very sensitive to such Trojans, because I feel that such sharing is carried with

Huawei network disk storage type xss RT. Thk @/fd.Detailed description: Buy glory 6. Test it ..Upload a file. Release External links. Modify external link nameThe entity encoding can generate an output point. Code Region Two exploitation

Some common attack methods and simple defense methods in WEB Development  SQL InjectionThe most common attack method, called SQL injection, is to insert SQL commands into Web forms to submit or enter query strings for domain names or page requests,

There is a weak password in a certain Suning border network device (which can overwrite the configuration file with the SSLVPN function) A vbr in Suning has a weak password (with SSLVPN configuration file), which may bypass the border firewall. Weak

Shopex csrf remove pants Arbitrary File delete file write shell Shopex csrf remove pants Arbitrary File delete file write shell All vulnerabilities are caused by a csrf. Let's take a look at them one by one:Install shopex in the latest version:  Ctl.