Cloud Security

PHP 'cgi _ main. c' out-of-bounds read Denial-of-Service Vulnerability Release date:Updated on: Affected Systems:PHP PHP PHP Description:Bugtraq id: 71833CVE (CAN) ID: CVE-2014-9427 PHP is a widely used scripting language. It is especially suitable

OpenSSL man-in-the-middle Security Restriction Bypass Vulnerability Release date:Updated on: Affected Systems:OpenSSL Project OpenSSL OpenSSL Project OpenSSL 1.0.1-1.0.1kOpenSSL Project OpenSSL 1.0.0-1.0.0pDescription:Bugtraq id: 71936CVE (CAN) ID:

FreeType 'src/cff/cf2hints. c' incomplete repair Remote Stack Buffer Overflow Vulnerability Release date:Updated on: Affected Systems:FreeType FreeTypeDescription:Bugtraq id: 71614 FreeType is a popular font function library. The remote stack

FFmpeg 'libavcodec/pngdec. c' cross-border Denial of Service Vulnerability Release date:Updated on: Affected Systems:FFmpeg 2.xDescription:Bugtraq id: 71619CVE (CAN) ID: CVE-2014-9317 FFmpeg is a free software that allows you to perform video,

OSSEC insecure temporary File Creation Vulnerability (CVE-2014-5284) Release date:Updated on: Affected Systems:OSSEC: OSSEC 2.8Description:Bugtraq id: 70149CVE (CAN) ID: CVE-2014-5284 OSSEC is an open-source host-based intrusion detection system. In

Baidu guard actively defends against invalid Vulnerabilities Lack of defense against the contextof the thread leads to baiduan.exe's eip being controlled and Arbitrary Code Execution Before an attack is triggered:  After an attack is

Ao you Browser: an error is reported from chicken ribs to local information readingBaidu browser is not updated yet. You can only play with other browsers. When an API is tested, an error is reported when it is run several times. You can also read

Android Hacking Part 10: insecure Local Storage Let's take a look at other security issues related to local storage in Android. File Download: SQLite Database SQLite is a file-based lightweight database. ". Db" and ". sqlite" are usually used as the

4A Security Analysis0x00. Overview 0.1 cause Some time ago, I saw someone asking about the 4A penetration test in the zone. I have been in touch with several 4A and bastion host products. Today I will summarize the 4A problems I encountered during

In-depth analysis of the smart socket CRACKING PROCESS Cracking the smart socket is a thing of the past. Someone has cracked the smart socket during the Geekpwn activity. However, details about how to crack smart sockets are not published. This made

Analysis and testing of DenDroid for super-strong mobile Trojan 2cto: Mobile Trojan Dendroid Symantec researchers discovered a new Dendroid trojan in the mobile phone field, which can easily achieve remote malicious control of mobile phones. Before

Custom Controls disguise "viruses" In the past few days, cainiao D has been engaged in custom controls (all Manager errors). A few days ago, the loading errors in the design field were rather miserable. Fortunately, a solution was found. Just today,

Iptables log Exploration In addition to effectively controlling network access, the main function of the firewall is to clearly record network access and automatically generate logs for storage. Although the log format varies with the firewall

ECStore open-source online shop system Arbitrary File Modification Vulnerability can be shell Select the file to be modified in the file editing function. Select the image here (the template file can also be used). Then, when uploading the image,

Because the ROOT permission is injected into an SQL statement by micro-seller, basically all data is stored. Micro-seller has ROOT permission for SQL Injection-basically all data is in Http:// B

Caijing website XSS Worm Worm = XSS + csrf  Address: http://tnew.caijing.com.cn/First post the post, directly post four parameters without token verification, resulting in a csrf vulnerability.    After reading the stored XSS, the post content is

SQL Injection at a certain part of yiche network affects a large number of databases SQL Injection at a certain part of yiche network affects a large number of databases The SQL injection point is

Dudubao has two Command Execution Vulnerabilities (getshell can be used) in a system) To prove this, getshell does not download any data and delete any files.------------------------------------------------------------------The "dudubao city public

Discuz! HTTP host Header attacks in multiple versions Http://www.bkjia.com/Article/201404/292132.html Discuz! X3.2 is an example.Take http://bbs.locojoy.com/as an example, 1. its ip address is 115.29.162.113 2. Add entries to hosts 115.29.162.1

Interesting Security experiment: using multi-thread Resource Competition technology to upload shell By competing with multi-threaded resources, you can upload two portraits at the same time to implement remote code execution in the Apache + Rails