Cloud Security

Oracle Solaris Remote Vulnerabilities (CVE-2014-6508) Release date:Updated on: Affected Systems:Oracle Solaris 11Description:Bugtraq id: 70549CVE (CAN) ID: CVE-2014-6508 Solaris is a computer operating system developed by Sun Microsystems. It is

VMware releases software updates to fix Shellshock Security Vulnerabilities VMware, one of several major technology companies, began releasing software updates to handle GNU Bash's Shellshock security vulnerabilities. Software affected by this

Xen 'x86 _ emulate. c' Local Privilege Escalation Vulnerability Release date:Updated on: Affected Systems:XenSource XenDescription:Bugtraq id: 70057 Xen is an open-source Virtual Machine monitor developed by the University of Cambridge. Xen has

Android App security reinforcement Industry Analysis ReportIn view of the popularity of the current Android App security reinforcement market, we have integrated the security reinforcement product of a popular security reinforcement vendor in the

If the order for the mobile phone version is leaked, the unauthorized permission can be canceled. Order Information is leaked without directly disclosing user informationCancelling others' ordersOrder ID can be traversed, full-site access ......Low

Linux Kernel ETHTOOL_GRXCLSRLALL local information leakage Vulnerability Release date:Updated on: Affected Systems:Linux kernel 2.6.27-git3-2.6.35Description:--------------------------------------------------------------------------------Bugtraq

WordPress Spider Facebook plug-in 'Facebook. php' SQL Injection Vulnerability Released on: 2014-09-07Updated on: Affected Systems:WordPress Spider FacebookDescription:Bugtraq id: 69675 WordPress Spider Facebook plug-ins include all available

Sabre AirCentre Crew 'cwplogin. aspx 'Multiple SQL Injection Vulnerabilities Release date:Updated on: Affected Systems:Sabre AirCentre Crew

Libav Media File Processing DoS Vulnerability Release date:Updated on: Affected Systems:LibavDescription:--------------------------------------------------------------------------------Bugtraq id: 69170 Libav is a cross-platform free software that

What are system vulnerabilities and patches? System vulnerabilities may often be heard, but some new users do not know what system vulnerabilities are? Simply put, system vulnerabilities are operating system programs and components that may have

Wireshark Multiple Vulnerabilities (MDVSA-2014: 050) Release date:Updated on: Affected Systems:Wireshark 1.8.0-1.8.12Wireshark 1.10.0-1.10.5Description:--------------------------------------------------------------------------------CVE (CAN) ID: CVE-

Fighting for alumni privacy-a counterattack from social engineering This article is purely fictitious. Please respect the author's literary creations. If there are similarities, it is purely a ghost. One day, my colleague suddenly told me that I

Thunder route DNS modification hijacking Vulnerability The DNS modification and hijacking vulnerability of thunder routes. If you don't fill it up, wait for the black hat hacker to hack you or your competitors to speculate. POST address:

How hackers bypass IDS for Buffer Overflow As a heavyweight product of enterprise security protection, IDS naturally becomes a target for hackers to crack. It turns out that bypassing IDS protection is completely feasible. The next article will

Shell resets the password for the new MySQL versionAfter the old version of MySQL is installed successfully, the root account has no password, which is convenient but insecure. From version 5.6.8 (the latest version is 5.6.20), a random temporary

Qibo cmsV7 full-site system SQL Injection Should the logic be slightly incorrect?Http://down.qibosoft.com/down.php? V = v7 Problems found during the download.  Function Add_S ($ array) {foreach ($ array as $ key => $ value) {if (! Is_array ($ value)

How to easily prevent DEDECMS Trojans Some DEDE background programs may be easily infected with Trojans. Of course, everyone has accumulated experience at and can easily prevent them from being infected. This requires In the process of gradual

A general-purpose electronic procurement platform has the Arbitrary File Upload Vulnerability GETSHELL  Detailed description: #1. carefully studying and finding that uploading arbitrary files in an editor can result in batch Getshell, which has a

Chanzhi enterprise portal system v2.5.1 bypass patches to continue Injection /System/module/user/model. php public function update($account) { /* If the user want to change his password. */ if($this->post->password1 != false)

Another try of JS poisoning I saw it half a month ago.‍‍‍EtherDream wrote the article about wifi traffic hijacking and JS poisoning, and it was a bit of fun in the company's laboratory. The first time I came into contact with this field, I felt