Cloud Security

Some Insecure Default LNMP configurations LNMP is a one-click nginx + php + mysql Environment Program in many Linux systems in China. However, the default configuration of the program is poor, which may cause security problems. However, the problem

HTTP File Server 'parserlib. pa' Remote Command Execution Vulnerability Release date:Updated on: Affected Systems:HTTP File Server 2.3.xDescription:Bugtraq id: 69782CVE (CAN) ID: CVE-2014-6287 HFS is the HTTP file server. The file ParserLib. pas

Disable service bypass and set security 1. Create a user "My Computer" -à "manage" (displayed)-à "System Tools"-à "local users and groups"-à "user" On the right side, -- à "new user" and fill in the corresponding information in "User Name" and

MatrixSSL ECC key verification Denial of Service Vulnerability Release date:Updated on: 2014-09-09 Affected Systems:MatrixSSLDescription:MatrixSSL is an embedded SSL and TLS implementation designed for applications and devices that consume less

Reexploit Remote Code Execution Vulnerability (CVE-2014-3178) after Google Chrome is released) Release date:Updated on: Affected Systems:Google Chrome Description:Bugtraq id: 69709CVE (CAN) ID: CVE-2014-3178 Google Chrome is a Web browser tool

Single-byte overflow buffer vulnerability in the libpng "png_formatted_warning ()" function Release date:Updated on: Affected Systems:Libpng 1.5.7Libpng 1.5.6Libpng 1.5.5Libpng 1.5.Unaffected system:Libpng 1.5.8Description:-------------------------

SolarWinds Log & Event Manager HyperSQL Remote Code Execution Vulnerability Released on: 2014-09-03Updated on: 2014-09-04 Affected Systems:SolarWinds Log & Event ManagerDescription:-------------------------------------------------------------------

VMware Support Insecure File Access Vulnerability (CVE-2014-4200) Release date:Updated on: Affected Systems:VMWare VMware Support Tool 0.88Description:--------------------------------------------------------------------------------Bugtraq id: 69410

Cgit 'syntax-highlighting. Sh' Remote Command Injection Vulnerability Release date:Updated on: Affected Systems:Hjemli cgitDescription:--------------------------------------------------------------------------------Bugtraq id: 56315Cve id: CVE-2012

Cisco IOS IPSec MTU Remote Denial of Service Vulnerability Release date:Updated on: Affected Systems:Cisco IOS 15.3Description:--------------------------------------------------------------------------------Bugtraq id: 63874CVE (CAN) ID: CVE-2013-6

Linux Kernel "hfs_mac2asc ()" Local Privilege Escalation Vulnerability Release date: 2011-11-21Updated on: 2011-11-22 Affected Systems:Linux kernel

Linux Kernel 'write _ tag_3_packet () 'Function Local Heap Buffer Overflow Vulnerability Release date:Updated on: Affected Systems:Linux kernel

Thunder route DNS modification hijacking Vulnerability The DNS modification and hijacking vulnerability of thunder routes. If you don't fill it up, wait for the black hat hacker to hack you or your competitors to speculate. POST address:

Ten tricks to protect your private photos Text: Liu Xingliang Once upon a time there was a person who could not repair his computer. Later, his story spread across the world. This person is our great instructor Edison Chen. Mr Chen has taken

Netease mailbox can read files at a location of XXE Netease mail supports online storage upload and the XXE vulnerability in uploading docx file Preview Unbind the docx file and modify word/document. xml:  ]>test

Cmseasy latest version (20140718) stored XSS blind playing background Stored XSS supports blind access to the backend ~/Lib/table/stats. php 13 rows getbot function:   public static function getbot() { $ServerName = $_SERVER["SERVER_NAME"];

Chanzhi enterprise portal system v2.5.1 bypass patches to continue Injection /System/module/user/model. php public function update($account) { /* If the user want to change his password. */ if($this->post->password1 != false)

The umail system uploads files, causing getshell The umail system uploads files, causing getshellSet the email, upload the image Trojan, and right-click to get the file path.

Kindeditor may cause full browsing in specific circumstances Because there are few examples, I started to think about not their vulnerabilities. I thought about them later, but I didn't check the user's normal configuration content. I 'd like to

Winmail mail body storage type xss (with trigger conditions) A product with similar functional styles as QQ mail, but its security is worse than QQ mailSimply put, the text is processed, but the user does not properly process the response or