Cloud Security

WebKit Memory Corruption Vulnerability (CVE-2015-1123)WebKit Memory Corruption Vulnerability (CVE-2015-1123) Release date:Updated on:Affected Systems: Apple TV Apple iOS Description: Bugtraq id: 73986CVE (CAN) ID: CVE-2015-1123WebKit is an

WordPress Pixabay Images plugin Arbitrary File Upload Vulnerability (CVE-2015-1375) Release date:Updated on: Affected Systems:WordPress Pixarbay Images 2.3Description:Bugtraq id: 73118CVE (CAN) ID: CVE-2015-1375 Pixabay Images is a WordPress plug-in

Firefox 31 ~ 34 Remote Command Execution Vulnerability Analysis 0x00 PrefaceSome time ago, the second brother promoted the scripting vulnerability to remote command execution in many browsers, almost all domestic browsers on the market, which has

Threat warning: a large number of ubnt devices are implanted with BackdoorsThis article describes in detail the entire process of discovering a hacker attack, analyzing intrusions, attacking a hacker server, obtaining permissions, and collecting

[CVE-2015-2080] Jetty web server Remote shared buffer Leakage0x00 Introduction A very ugly security company named GDS recently discovered a jetty web server security vulnerability that allows attackers to remotely read previous request information

SF app verifies user vulnerabilities and obtains coupons and solutions for others in batches. The SF Express app did not verify the account currently logged in when querying SF coupons, so that you can view SF coupons under other accounts. $nn=800008

LibTIFF cross-border read/write Multiple Remote Denial of Service Vulnerabilities (CVE-2014-8129) Release date:Updated on: Affected Systems:LibTIFFDescription:Bugtraq id: 72352CVE (CAN) ID: CVE-2014-8129 LibTIFF is a library used to read and

FFmpeg 'libavcodec/utvideodec. c' Denial of Service Vulnerability (CVE-2014-9604) FFmpeg 'libavcodec/utvideodec. c' Denial of Service Vulnerability (CVE-2014-9604) Release date:Updated on: Affected Systems:FFmpeg Description:Bugtraq id: 72272CVE (

Multiple GnuPG Memory Corruption Vulnerabilities Release date:Updated on: Affected Systems:GnuPG Gnupg2 2.0.26Description:Gnupg2 is a GNU encryption program. Gnupg2 2.0.26 and earlier versions have multiple security vulnerabilities. Malicious users

Discover and exploit ntpd Vulnerabilities0x01 Introduction A few months ago, I decided to start doing fuzzing. I chose the Network Time Protocol (NTP) Reference to achieve ntpd as my first goal, because I have some background knowledge about NTP,

One-click installation of LNMP environment using Shell scripts Nginx is a high-performance HTTP and reverse proxy server. Nginx has a strong advantage in reverse proxy, Rewrite rules, stability, static file processing, and memory consumption.

An email server of China Southern Airlines can remotely obtain administrator privileges. The artifact is found. Please be careful about worms ~ ssh [email protected]P@ssw0rd       [admin@smtp1 ~]$ netstat -antp(Not all processes could be

12 injection packages in the Tipask Q & A SystemWhen taking part in a public test, the manufacturer used this system and downloaded it and looked at it and found a lot of injection. Because the backend SQL statements of the program do not enclose

Optimistic about your portal-data transmission on the client-modifying referer with java1. Referer is used to indicate where the browser is from to the WEB server. However, it is not completely secure. Write an example to modify the referer in the

Getshell can access the Intranet to obtain domain control and solutions from yifen. Http: // 112.65.254.20.: 8080/jmx-console/ This is another server.And the last It is not completely fixed. As a result, getshell can be performed again.JBOOS

Gray-box web Security Detection Technology In traditional application testing methods, gray-box testing is between white-box testing and black-box testing. Gray-box web Security Detection still follows the concept of gray-box testing, but only

No restrictions on getshell at the front end of the latest version of Feifei Film No restrictions on getshell v2.9 Any file contains:Demo site test:  Code Analysis: myaction. class. php display('my_'.trim($id));echo $id;echo '11111111111111111111111

Qibocms local portal system Injection Vulnerability Qibocms local portal system injection many similar vulnerabilities can be found anywhere.Register a member first.In dianping/post. php If ($ action = "postnew") {if ($ webdb [ForbidPostMore]) {if ($

Geek Park official website administrator Cookie leakage directly into the background and Solution   Geekpark.netA few months ago, the WooYun salon connected the same WiFi with the reporter sister of geek Park and caught her Cookie with the dSploit

Server guard talent system: 7 unauthorized + 2 SQL Wap_user.php: The unauthorized access does not involve uid, causing any changes to any database records.Article 1: Elseif ($ act = "resume_work_del") {// unauthorized $ smarty-> cache = false; $ id =