Cloud Security

ZTE Huawei Guangda text router/CAT found 0-Day Vulnerability Security researchers found a large number of zero-day vulnerabilities in two routers and six modem products produced by ZTE, Huawei, Guangda, and text technology, attackers can launch

Linux kernel Privilege Escalation Vulnerability (CVE-2015-7613)Linux kernel Privilege Escalation Vulnerability (CVE-2015-7613) Release date:Updated on:Affected Systems: Linux kernel 〈 4.2.3 Description: CVE (CAN) ID: CVE-2015-7613Linux Kernel is

Cisco ACS Solution Engine XSS Vulnerability (CVE-2015-6349)Cisco ACS Solution Engine XSS Vulnerability (CVE-2015-6349) Release date:Updated on:Affected Systems: Cisco Access Control Server 5.7 (0.15) Description: CVE (CAN) ID:

Qolsys IQ Panel hardcoded Key Vulnerability (CVE-2015-6032)Qolsys IQ Panel hardcoded Key Vulnerability (CVE-2015-6032) Release date:Updated on:Affected Systems: Qolsys IQ Panel Description: CVE (CAN) ID: CVE-2015-6032Qolsys IQ Panel is an

FortiClient Antivirus unauthorized operation Vulnerability (CVE-2015-5735)FortiClient Antivirus unauthorized operation Vulnerability (CVE-2015-5735) Release date:Updated on: 2015-09-06Affected Systems: FortiGuard forticlient 5.2.4 Description:

Innominate mGuard VPN vulnerability in CVE-2015-3966)Innominate mGuard VPN vulnerability in CVE-2015-3966) Release date:Updated on:Affected Systems: Innominate mGuard 8.0.0-8.1.6 Description: CVE (CAN) ID: CVE-2015-3966MGuard is a product line

Wireshark WaveAgent Dissector DoS Vulnerability (CVE-2015-6246)Wireshark WaveAgent Dissector DoS Vulnerability (CVE-2015-6246) Release date:Updated on:Affected Systems: Wireshark Wireshark 1.12.x Description: Bugtraq id: 76381CVE (CAN) ID: CVE-2015-

What about RFID in residential areas? Environment and tools Win xp pro sp3m1card cracking tool nfcgui-pro.exehexcmp.exe Let's take a look at our leading role.     At the beginning, when I started the card, I said that I had to pay for the card

CVE-2015-3113 Analysis Fireeye discussed a network espionage team in its blog "Operation Clandestine Wolf" in June 23. The well-known APT3 used a 0-day vulnerability in Adobe Flash. Unit42 also uses UPS to track the APT3 team. It is an intrusion

Wordpress XSS Vulnerability (CVE-2015-3439)Wordpress XSS Vulnerability (CVE-2015-3439) Release date:Updated on:Affected Systems: WordPress Description: CVE (CAN) ID: CVE-2015-3439WordPress is a blog platform developed in PHP.In versions

Dongle prohibits iis Command Bypass Dongle prohibits iis Command Bypass 1: = the safety dog feature is getting worse and worse. At first, let's take a look at the following disgusting things:1): Upload protection, such as uploading aspx and asp.2):

Identity Mixer, an IBM encryption tool platform, has been available to developers recently. First, this is good news for many developers. Developers are now able to encrypt important data on apps developed at the enterprise level. Identity Mixer is

Discuz X1.5 uses adding friends to store xss for worm Spread Discuz X1.5 stores xss at the place where friends are added. xss interacts with users to spread the worm index. Position: Add a friend Effect after x Triggered after clicking OK with

Baidu qiba URL jump can be used for phishing Baidu qiba URL jump can be used for phishing Problem URL: http://ssp.baidu.com//ce.wooyun.orgHttp://ssp.baidu.com> http://ssp.baidu.com/homeThat is to say, directly open the http://ssp.baidu.com, the

Security Monitoring for www.360xxxx.comDescription This penetration intrusion only focuses on the discovery of problems without any destructive behavior. To ensure the information security of the target site, the image has been coded. the following

XSS Cross-Site Splitting0x01: Description Recently, a phpcmsv9 website was built and used for testing. It is a low version and has many vulnerabilities. Many vulnerability analyses can be found on wooyun. In this case, I want to take a look at the

Php script: use search engines to batch crawl Vulnerabilities Sanner-Inurlbr is a good tool found on the author's foreign vulnerability platform that uses search for batch search. It uses the freebuf platform to share it with friends who love

ColdFusion explosion: chain reaction from XSS to RCE I found a DOM-based cross-site scripting vulnerability while auditing the Management Panel of ColdFusion 10 and 11. In this article, I will show you how to use this vulnerability to obtain remote

Multiple phone calls a system SQL injection vulnerability 19 database DBAs can be recharged (Getshell + 3389) Multiple phone calls a system SQL injection vulnerability 19 database DBAs can be recharged (Getshell + 3389) POST /do/showfrees.php HTTP/1.

Search and fix SQL Injection VulnerabilitiesWhen we want to test a site, the injection tool on the shelf is usually used to blow it up. Although some injection points can be found, it is still a bit blind. My personal opinion is: if the source code