Cloud Security

Linux kernel IPv4 Denial of Service Vulnerability (CVE-2015-1465)Linux kernel IPv4 Denial of Service Vulnerability (CVE-2015-1465) Release date:Updated on:Affected Systems: Linux kernel Description: CVE (CAN) ID: CVE-2015-1465Linux Kernel is the

Websense TRITON AP-WEB Information Leakage Vulnerability (CVE-2015-2748) Release date:Updated on: Affected Systems:Websense TRITON AP-WEB Description:CVE (CAN) ID: CVE-2015-2748 Websense TRITON AP-WEB is a real-time Web security solution.

SIMATIC WinCC device information leakage Vulnerability (CVE-2015-1601)SIMATIC WinCC device information leakage Vulnerability (CVE-2015-1601) Release date:Updated on:Affected Systems: Siemens SIMATIC WinCC (TIA Portal) Description: CVE (CAN)

Vulnerability events make OpenDaylight more secure The original intention of open-source projects is always good, and there are bright future expectations, but security is never the most important... The Linux Foundation launched the OpenDaylight

Cisco CUCDM Remote Code Execution Vulnerability (CVE-2015-0682) Release date:Updated on: Affected Systems:Cisco uniied Communications Domain Manager 8.1 (4)Cisco uniied Communications Domain ManagerDescription:CVE (CAN) ID: CVE-2015-0682 Cisco

WordPress Daily Edition Theme Full path information leakage Vulnerability Release date:Updated on: Affected Systems:WordPress Daily Edition 1.6.7WordPress Daily EditionDescription:Bugtraq id: 73059 WordPress is a Blog engine developed using PHP

PCRE Denial of Service Vulnerability (CVE-2015-2328) Release date:Updated on: Affected Systems:PCRE pcreDescription:CVE (CAN) ID: CVE-2015-2328 PCRE (Perl Compatible Regular Expressions) is a Perl library, including a perl-Compatible Regular

Capture the tail of a Linux Trojan and clear it Linux Trojans are becoming more and more common, while Linux systems often run important services. Therefore, once a trojan is implanted, it will have a great impact on the business. Not long ago, a

Linux privilege escalation:/bin/bash ^ M: bad interpreter: No such file or directory When executing a Script exploit. sh, it always prompts me: -Bash:./exploit. sh:/bin/bash ^ M: bad interpreter: No such file or directory   One of the reasons

2345 security guard Driver Design Problems 2345 the 2345powerapi. sys driver installed by the security guard does not verify the process of opening the device object. Any process that has the permission to open the device object can use the function

Security risks of allowBackup in Android attributes1. allowBackup Security Risk Description Android API Level 8 and later Android systems provide the backup and recovery functions for application data. The switch of this function is determined by

QQ Browser Remote Arbitrary Command Execution Vulnerability (with analysis and use) 1. For the QQ browser, as long as it is a webpage under the domain name of qq.com, it has the permission to call some API Interfaces under external,

Exposure of fully automated black market (one-stop automatic batch SHELL) I accidentally touched the tip of the iceberg and learned that the development of the black industry is faster than we thought. It has evolved into a one-stop full-automated

Analysis of Smack Remote Control Trojan The AVL mobile security team recently discovered an Android spyware program developed based on XMPP Smack Openfire. The malware has the following features: 1. Upload the user's contact information, text

Getshell caused by leakage of O & M documents of a sub-station of Baosteel Trading Company The maintenance documents of the sub-stations of Baosteel Trading Company are leaked, including intranet information, background addresses of multiple

Multiple cms backgrounds can be cracked and bypassed for protection 1. Phpcms Phpsso_server in PhpcmsAfter the cracking, the code value in the Session will not be refreshed no matter whether the account password is correct or not.The login page

Magic game injects a large number of databases and information leakage of millions of members at a certain point. Magic game mobile game trading networkChina's first mobile game transaction PortalMoyoyoWhich of the following is the safest and most

The maintenance and monitoring system of a mall owned by CITIC group has File Upload to obtain system permissions. The opmanager version is too low, with a verification program written in python. Problematic site: http://ns1.dchnu.comAn upload

Js script-determine the small pop-up window and user browser type 1. pop-up window for the user to choose whether to continue the next step Html> body> script type = "text/JavaScript"> var r = confirm ("this system only supports the chrom browser!

Getshell Vulnerability Analysis in case of enterprise-level CMS Yiqicms is a well-known website construction system for Marketing Enterprises in China. It is developed based on PHP + MySQL. Free open-source, SEO friendly. Recently, Alibaba's patch