Cloud Security

Linux Kernel 'net/mac80211/tx. c' Information Leakage Vulnerability Release date:Updated on: Affected Systems:Linux kernel Description:Bugtraq id: 70965CVE (CAN) ID: CVE-2014-8709 Linux Kernel is the Kernel of the Linux operating system. In

Multiple Linux Kernel Security Vulnerabilities Release date:Updated on: Affected Systems:Linux kernelDescription:Bugtraq id: 71253 Linux Kernel is the Kernel of the Linux operating system. Linux Kernel has multiple security vulnerabilities.

Dve data virtual execution technology vs dep + aslr + emet + cfi The idea of articles about 97 years ago should be somewhat early. When the macro virus broke out, Kingsoft and Jiangmin company thought about it. In fact, the previous article refuted

Win32k! GreBatchTextOut overflow exp challenge Http://technet.microsoft.com/en-us/security/bulletin/ms13-101 cve-2013-3899   Kd> u win32k! GreBatchTextOutWin32k! GreBatchTextOut:Bf8aa8b4 6818010000 push 118 hBf8aa8b9 68703c9abf push offset win32k!

Internet Explorer GC Information Leakage This vulnerability was released by dion Ox a few months ago. Recently, it also won the pwnie award. In the original article, we talked about flash, ff and Other GC engines all adopt conservative mark clearing

Multiple critical security vulnerabilities in OS X Yosemite Emil Kvarnhammar from Swedish security company Truesec found multiple security vulnerabilities in OS X 10.10, codenamed Yosemite. He named it rootpipe. He published an article explaining

Apache CXF Denial of Service Vulnerability (CVE-2014-3584) Release date:Updated on: Affected Systems:Apache Group CXF Apache Group CXF Description:Bugtraq id: 70738CVE (CAN) ID: CVE-2014-3584 Apache CXF is an open-source service framework used to

OpenSSL session ticket Memory leakage Vulnerability (CVE-2014-3567) Release date:Updated on: Affected Systems:OpenSSL Project OpenSSL Description:Bugtraq id: 70586CVE (CAN) ID: CVE-2014-3567 OpenSSL is an open-source SSL implementation that

Sangfor Intranet roaming (breaking through remote application sandbox) Sangfor Intranet roaming, Enterprise Security!Sangfor is the vpn manufacturer. Is there any problem with the vpn security mechanism? Yesterday I found the mailbox security

Anti-SYN Attack in CentOS It was slow to log on to the company's official website this morning. log on to the server and check the website access information: [Root @ web ~] # Netstat-anp | awk '{print $6}' | sort | uniq-c | sort-rn 172 ESTABLISHED 5

Sogou SQL injection 2: MySQL injection on pinyin.sogou.com Second, MySQL injection on pinyin.sogu.com  The injection point is located:_____________________________________________________________POST

UWA-2X (v2.1.3) Foreground unrestricted getshell caused by a function defect   Vulnerability in cookie encryption function public static function encrypt($txt, $key = '') {$encrypt_key = md5(mt_rand(0, 32000));$ctr = 0;$tmp = '';for($i = 0; $i Why

A collection of vulnerabilities in a weaver system (not a qualified white hat without shell) With the previous SQL injection, you can easily obtain a Logon account. During the test, two systems with weak passwords were found to log on directly (no

Multiple SA permissions in CMS of a device sharing platform SQL Injection package #1   What went wrong was the "large instrument and equipment sharing platform system" developed by the vendor"About: http://www.wanxinsoft.com/product1_1.asp  Some

Multiple vulnerabilities in rice cms combined into shell First, let's talk about his xss. Almost no filtering. (Register an account and modify user information)Register an account first.  After the registration is successful, we will not care.Wait

OAsql injection vulnerability in a school's Integrated Management Platform (affecting a large number of schools)   A large number of schools use this system management platform to discover no vulnerabilities, but this system comes with a set of OA

Php webshell directly rebounded shell (without using any other language)In linux, sometimes obtaining the webshell requires Elevation of Privilege, And the Elevation of Privilege requires an interactive shell. I have read the commonly used php

Future of SSLStrip-HTTPS front-end hijacking (1) 0x00 Preface In the previous article on traffic hijacking, we mentioned a scheme of "HTTPS downgrading"-replacing all the HTTPS hyperlinks on the page with the HTTP Version, allows users to

Apache Mina Development Manual IV Apache Mina Development Manual IV 1. Main steps of Mina Development 1. Create a class that implements the IoService Interface The IoService interface has two subinterfaces:1) IoAcceptor interface for Servers2)

Native creative CRM system unlimited arbitrary file downloads In/down. php   GET ParametersThen, it is directly written into the database.No restrictions !!Let's try to download login. php.  Open the file and check the file content.  We