Cloud Security

Symantec DLP Cross-Site Request Forgery Vulnerability (CVE-2015-1485)Symantec DLP Cross-Site Request Forgery Vulnerability (CVE-2015-1485) Release date:Updated on:Affected Systems: Symantec Data Loss Prevention Description: Bugtraq id: 75289CVE

EMC Documentum D2 multiple DQL Injection Vulnerabilities (CVE-2015-0547)EMC Documentum D2 multiple DQL Injection Vulnerabilities (CVE-2015-0547) Release date:Updated on:Affected Systems: EMC Documentum D2 4.5EMC Documentum D2 4.2EMC Documentum D2 4

CA Common Services Privilege Escalation Vulnerability (CVE-2015-3317)CA Common Services Privilege Escalation Vulnerability (CVE-2015-3317) Release date:Updated on:Affected Systems: CA Common Services Description: CVE (CAN) ID: CVE-2015-3317CA

Apple Mac firmware 0day EFI rootkit VulnerabilityApple Mac firmware 0day EFI rootkit Vulnerability Release date:Updated on:Affected Systems: Apple Mac MacBook Pro RetinaApple Mac MacBook ProApple Mac MacBook Air Description: Mac is a personal

CURL/libcURL Remote Security Restriction Bypass Vulnerability (CVE-2015-3148)CURL/libcURL Remote Security Restriction Bypass Vulnerability (CVE-2015-3148) Release date:Updated on:Affected Systems: CURL 7.10.6-7.41.0 Description: Bugtraq id: 743

ProFTPD Information Leakage Vulnerability (CVE-2015-3306)ProFTPD Information Leakage Vulnerability (CVE-2015-3306) Release date:Updated on:Affected Systems: ProFTPD Project ProFTPD Description: Bugtraq id: 74238CVE (CAN) ID:

One wallet app's parallel permission control is lax, leading to user information leakage You can check the personal information corresponding to the specified mobile phone number. Interface: the app portal is the activity "I

SQLite sqlite3VXPrintf Function Denial of Service VulnerabilitySQLite sqlite3VXPrintf Function Denial of Service Vulnerability Release date:Updated on:Affected Systems: SQLite Description: CVE (CAN) ID: CVE-2015-3416SQLite is an embedded

Oracle Solaris local vulnerability (CVE-2015-0471)Oracle Solaris local vulnerability (CVE-2015-0471) Release date:Updated on:Affected Systems: Oracle Solaris 11.2Oracle Solaris 10 Description: Bugtraq id: 74138CVE (CAN) ID:

Compared with HTTP, how does one make the network more secure?Users who frequently use browsers to browse Web pages will notice that the opened IP address is usually headers of HTTP or HTTPS. What is the difference between the two? HTTP, or

TCP connection EstablishmentIn order to establish a TCP connection, the computer needs to do the following for us: 1. the requester (usually called the customer) sends a SYN segment to indicate the server port to which the customer intends to

How to securely store passwords?Use bcrypt Use bcrypt, use bcrypt, and use bcrypt (more than once )......Why does not {MD5, SHA1, SHA256, SHA512, SHA-3 and other encryption algorithms }? These are all common hash functions. The original intention is

Phpyun talent department () 2 SQL injections (any resume can be deleted) Phpyun talent department () 2 SQL injections (any resume can be deleted)Attackers cannot bypass waf and obtain sensitive information. Code/Wap/member/model/index. class.

Google research found that website security issues are not actually safe For enhanced security, multiple websites often have security issues beyond the password. However, Google's in-depth research shows that the last line of defense after the

Popular SSL/TLS protocols: in-depth interpretation of SSL/TLS implementation (1) Preface The SSL/TLS protocol is an important cornerstone of secure network communication. This series will briefly introduce the SSL/TLS Protocol, focusing on the

Suning Tesco has two parallel permissions and one user information leakage (fake comments are acceptable) and Solutions Suning's third-party products do not dare to give negative reviews... The interface for getting product comments

No. 1 driver Password Reset Vulnerability The user client is doing well, but the driver must do well.Detailed description: Submit packet capture Code Region POST /vip-d/driver/resetPwd HTTP/1.1Content-Length: 30Content-Type:

Multiple Injection packages in a system of yiche I found that many people recently submitted a hole in the car, making it a hot topic. Problem site:Http://log.yiqi.autodmp.cig.com.cn/Use the previously collected accounts to check the injection

A critical system vulnerability in UFIDA Successful intrusion through an obsolete system and leakage of most of the source codeFirst, the system has a weak password http://vip.ufida.com.cn/nccsm/HomePage.aspxtest1 123456 there are a large number of

Security risks caused by PHP featuresPHP scripts are weak types of scripts, which refer to a number of standards for string processing, such as IEEE 754. However, design and implementation may lead to security risks.Type conversion risks in case 1