Cloud Security

Google Chrome DOM bypassing same-origin Policy Vulnerability (CVE-2015-6768)Google Chrome DOM bypassing same-origin Policy Vulnerability (CVE-2015-6768) Release date:Updated on:Affected Systems: Google Chrome Description: CVE (CAN) ID: CVE-201

Apple Safari WebKit Memory Corruption Vulnerability (CVE-2015-7101)Apple Safari WebKit Memory Corruption Vulnerability (CVE-2015-7101) Release date:Updated on:Affected Systems: Apple Safari Apple iOS Apple tvOS Description: CVE (CAN) ID: CVE-2

PCRE pcre_exec Function Denial of Service Vulnerability (CVE-2015-8380)PCRE pcre_exec Function Denial of Service Vulnerability (CVE-2015-8380) Release date:Updated on:Affected Systems: PCRE Description: CVE (CAN) ID: CVE-2015-8380PCRE is a

PNG Image Processing Library libpng exposed vulnerability, which has been preliminarily fixed The image processing Library libpng has revealed a vulnerability and needs to be repaired as soon as possible. The biggest problem is that, the popularity

Oracle Sun ILOM component Remote Vulnerability (CVE-2015-4915)Oracle Sun ILOM component Remote Vulnerability (CVE-2015-4915) Release date:Updated on:Affected Systems: Oracle Sun Systems Products Suite 3.2Oracle Sun Systems Products Suite 3.1Oracle

NTP Multiple Arbitrary File Overwrite Vulnerability (CVE-2015-5196)NTP Multiple Arbitrary File Overwrite Vulnerability (CVE-2015-5196) Release date:Updated on:Affected Systems: NTP 4.x Description: Bugtraq id: 76476CVE (CAN) ID:

IBC Solar ServeMaster Source Code Vulnerability (CVE-2015-6469)IBC Solar ServeMaster Source Code Vulnerability (CVE-2015-6469) Release date:Updated on:Affected Systems: IBC Solar ServeMaster TLP +IBC Solar Danfoss TLX Pro + Description: CVE

Php pcre extended heap buffer overflow and DoS VulnerabilitiesPhp pcre extended heap buffer overflow and DoS Vulnerabilities Release date:Updated on:Affected Systems: PHP 5.x Description: Bugtraq id: 76647PHP is a widely used scripting

IOS 9.0.2 has fixed the previous lock screen vulnerability. Do you still remember the vulnerability that used Siri to bypass the screen lock to access a contact or album before iOS 9? In the latest iOS 9.0.2, the manufacturer has fixed this issue

MediaWiki DoS Vulnerabilities (CVE-2015-6733)MediaWiki DoS Vulnerabilities (CVE-2015-6733) Release date:Updated on: 2015-09-02Affected Systems: MediaWiki MediaWiki MediaWiki Description: CVE (CAN) ID: CVE-2015-6733MediaWiki is a famous wiki

MediaWiki thumb. php XSS Vulnerability (CVE-2015-6730)MediaWiki thumb. php XSS Vulnerability (CVE-2015-6730) Release date:Updated on: 2015-09-02Affected Systems: MediaWiki MediaWiki MediaWiki Description: CVE (CAN) ID: CVE-2015-6730MediaWiki

Wan Xiang network management design defects enable unlimited accessBrief description: By terminating a thread of the hichina Network Management Service, the machine can access the Internet without a limited time. I opened the host at with 3 yuan,,

How to quickly clear Trojans and viruses in the systemWhat hackers need to do after intrusion is to upload a trojan backdoor. In order to prevent the uploaded trojan from being detected, they will try their best to disguise it. As the victim, how

RxJava operator (3) FilteringIn the previous article, we learned about conversion operators that can convert data into the desired format. But what if there is some data in the data set that we want to filter out? At this time, we need to use the

Loose Account Control of an important system in Ganji results in leakage of a large amount of internal information (affecting multiple internal sites) and Solutions There is a donkey,But never ride.House searchingJob SearchFind DecorationLook for a

Run powershell with dns txt Record 0x00 Introduction Dns txt records are generally used to record the description of a host name or domain name setting. You can enter anything here, with a length limit of 255. The vast majority of TXT records are

ShopEx multiple employees have insufficient security awareness to leak internal business information The email addresses of the following employees have weak passwords, including hr. Hr Shopex123Chenminrui Shopex123Huhao Shopex123Lihuatian Shopex12

Illustration: How XSS attacks work Currently, of the top 1000 most popular websites with access traffic, 6% have become victims of XSS attacks. Since the birth of modern Web development technology, cross-site scripting attacks and Web-based

Php SQL anti-injection experienceOn the one hand, I am not aware of the cause. Some data has not been strictly verified, and then I directly concatenate an SQL statement to query it. Cause the vulnerability, such as: $ id = $ _ GET ['id']; $ SQL =

ColdFusion explosion: chain reaction from XSS to RCE I found a DOM-based cross-site scripting vulnerability while auditing the Management Panel of ColdFusion 10 and 11. In this article, I will show you how to use this vulnerability to obtain remote