Cloud Security

Advantech EKI-1200 Series Buffer Overflow Vulnerability (CVE-2014-8385) Release date:Updated on: Affected Systems:Advantech EKI-1200 Description:Bugtraq id: 72580CVE (CAN) ID: CVE-2014-8385 EKI-1200 Modbus gateways are bidirectional gateways that

Apache Qpid incomplete repair of Multiple Denial of Service Vulnerabilities (CVE-2015-0224) Release date:Updated on: Affected Systems:Apache Group Qpid Description:Bugtraq id: 72317CVE (CAN) ID: CVE-2015-0224 Apache Qpid (Open Source AMQP

Libpng Multiple Heap Buffer Overflow Vulnerabilities (CVE-2015-0973) Release date:Updated on: Affected Systems:Libpng 1.6.15Description:Bugtraq id: 71994CVE (CAN) ID: CVE-2015-0973 Libpng is a function library used by various applications to

Oracle Database Server Remote Vulnerabilities (CVE-2014-6514) Release date:Updated on: Affected Systems:Oracle database server 11Description:Bugtraq id: 72166CVE (CAN) ID: CVE-2014-6514 Oracle Database Server is an object-1 relational Database

Pidgin DoS Vulnerability (CVE-2014-3695) Release date:Updated on: Affected Systems:Pidgin PidginDescription:Bugtraq id: 70702CVE (CAN) ID: CVE-2014-3695 Pidgin is a multi-in-One world mainstream instant messaging software integration tool. When

Huawei E5332 Webserver memory overflow vulnerability in CVE-2014-5327) Release date:Updated on: Affected Systems:Huawei E5332 21.344.19.00.1080Unaffected system:Huawei E5332 21.344.27.00.1080Description:Bugtraq id: 70403CVE (CAN) ID: CVE-2014-5327

You are actually poisoning the public key! -- How to add a backdoor to the RSA public key When I knew how it was running, my chin fell. This is a very simple method, but this article will subvert your previous views on RSA. This is not a method to

Avoid Windows 8.1 security "traps" With the termination of the lifecycle of Windows XP, many enterprises choose to upgrade to Windows 8.1. Without a doubt, Windows 8.1 delivers ultimate speed, significantly improved workflows, and enhanced security.

Lvmeng RSAS security system full edition kill permission administrator bypass vulnerability, including the latest RSAS V5.0.13.2 Rumeng RSAS security system full edition kill Permission Bypass Vulnerability, including the latest RSAS V5.0.13.2RSAS

Clear the SweetIM rogue plug-in I don't know what kind of website I got. Since I went home yesterday afternoon, as long as my computer is on and connected to the Internet, my AVast! The firewall keeps reporting that a program is attempting to send

Oriental fashion driving school SQL Injection getshell cross-database N multi-data   Today, the car appointment time is queried, but the webpage cannot be opened... 3G and WiFi cannot go in... I had to open it and try again.The Oriental fashion

Research on Perl data type security0x01 Problem To put it bluntly, what is the problem that has existed in perl for 20 years? Throwing away the slot of perl syntax, the real problem lies in data types, which is the data type. Perl's processing of

Package General SQL injection vulnerabilities in a weaver System (Full Version)   Tested Website: http://gl.triolion.com/& http://oaf.yitoa.com: 6688/The version information is as follows:    Note: The following examples show that two SQL

Traffic-driven CMS2 files, two injections, five problem codes, and other injection bypass MethodsThe vendor has made great efforts in security. Although many parameters and data type conversion are involved, there will inevitably be omissions. We

How to fully control sessions? Check WebSocket cross-site hijacking (1) WebSockets is an HTML5 feature that provides full-duplex channels for a single TCP connection. Its persistent connection function makes it possible to build real-time

One ThinkSNS SQL injection (ignoring WAF) Found during development. Apps/page/Lib/Action/DiyAction. class. php line 192: public function doCopyTemplate() {$id = intval ( $_POST ['id'] );$page = $_POST ['page'];$channel = $_POST

Sogou SQL injection 4: MySQL injection on the game site SQL Injection on a game substation in sogou.  1. MySQL injection is located at the following address, which is a time-based injection:The UserID parameter is not filtered and can be

Ecshop csrf defense bypasses the background sensitive function csrf getshell   Supports csrf to execute various background sensitive functions. The analysis here is to use the empty referer method to bypass.This bypass can be used to implement csrf

Protection and bypass for repeated packet sending 0x00. Preface Currently, the primary problems caused by repeated packet sending include credential stuffing and brute-force cracking. As more and more passwords are leaked, this type of problem has

Shellscript script Learning [Root @ fwq prac] # cat sh01.sh #! /Bin/bashPATH =/bin:/sbin:/usr/bin:/usr/sbin: usr/local/bin:/usr/local/sbin :~ /Binexport PATHecho-e "Hello World! \ A \ n "exit 0 ==================================== ===================