Cloud Security

PCRE pcre_exec Function Denial of Service Vulnerability (CVE-2015-8380)PCRE pcre_exec Function Denial of Service Vulnerability (CVE-2015-8380) Release date:Updated on:Affected Systems: PCRE Description: CVE (CAN) ID: CVE-2015-8380PCRE is a

389 Directory Server nsSSL3Ciphers preference Vulnerability (CVE-2015-3230)389 Directory Server nsSSL3Ciphers preference Vulnerability (CVE-2015-3230) Release date:Updated on:Affected Systems: 389 Directory Server 389 Directory Server

Borland AccuRev Stack Buffer Overflow Vulnerability (CVE-2015-6946)Borland AccuRev Stack Buffer Overflow Vulnerability (CVE-2015-6946) Release date:Updated on:Affected Systems: Borland ACCUREV Description: CVE (CAN) ID: CVE-2015-6946Borland

Sybase Database Security IntroductionThe full name of Sybase is SAP Sybase Adaptive Server Enterprise (ASE or Sybase ASE for short). It inherits the original MSSQL Code and is closely related to MSSQL. Sybase is a relational database system. It is a

Apple Safari WebKit PDF Vulnerability (CVE-2015-3660)Apple Safari WebKit PDF Vulnerability (CVE-2015-3660) Release date:Updated on:Affected Systems: Apple Safari Apple Safari Apple Safari Description: Bugtraq id: 75494CVE (CAN) ID: CVE-2015-36

Linux kernel OZWPAN driver DoS Vulnerability (CVE-2015-4002)Linux kernel OZWPAN driver DoS Vulnerability (CVE-2015-4002) Release date:Updated on:Affected Systems: Linux kernel Description: CVE (CAN) ID: CVE-2015-4002Linux Kernel is the Kernel of

Remote Code Execution Vulnerability (CVE-2015-3990) for multiple Dell SonicWALL Products)Remote Code Execution Vulnerability (CVE-2015-3990) for multiple Dell SonicWALL Products) Release date:Updated on:Affected Systems: Dell Sonicwall GMS Virtual

Use hackrf to sniff gsm traffic When my colleague and friend Simon were visiting our zimperium tlv office, we started to learn HackRF and use radio frequencies to sniff unprotected GSM communication traffic. Simon patiently explained to me the

Use a password in Linux to encrypt and decrypt files Sometimes, you need to send a file containing sensitive information to someone over the internet, so you start to think, "My file contains some very sensitive information, how can I send files

Analysis of SpyderSec challenge solving ideas   The challenge we are going to solve today is very interesting. It is called SpyderSec. We will build it on the VirtualBox Virtual Machine and open Nmap. After Nmap scans, it will only open port 80. In

PHP email injection practice I. Introduction Today, the use of the Internet has risen sharply, but the vast majority of Internet users have no security knowledge background. Most people use the Internet to communicate with others by Email. For this

A website of hesheng yuan can use getshell to threaten Intranet Security (disclosing some personnel information and discovering previous footprints) A sub-station of hesheng yuan can shell into the IntranetHttp: // 58.62.201.210/   The integration

PfSense Command Injection Vulnerability Analysis In this article, we will introduce you to CVE-2014-4688 vulnerabilities in PfSense 2.1.3 and earlier; for a later version, pfSense has fixed this vulnerability.0x01 Diag_dns.php script Command

China Unicom woyun 0 RMB cloud host purchase China Unicom woyun 0 RMB cloud host purchase Detailed vulnerability process:1. Start to apply for a VM instance.  Note: In network settings, you must first create a virtual private cloud before you can

Firefox bookmarks extended application Pocket: vulnerability mining is not that difficult Pocket application developers recently fixed several data leakage vulnerabilities. Hackers can obtain WEB services, internal IP addresses, and more sensitive

Reset any User Password Www.wang.com, formerly known as www.51ili.com, is a publicity media, a marketing consultant, and a sales channel for sellers. Through the Internet, merchants can make the most effective product promotion for Accurate target

MSSQL blind injection on a site in New Oriental MSSQL blind injection on a site in New Oriental Injection point: POST /p/Handler/ApiHandler.ashx HTTP/1.1Content-Length: 87Content-Type: application/x-www-form-urlencodedX-Requested-With:

Superstar education's SQL Injection across multiple databases to leak a large amount of data Avengers 2 tells a story about how a local programmer who is overconfident and writes a bug program to work overtime to fix the vulnerability. Also known as:

Shanda website source code leakage (token leakage may affect the public account) Shanda station source code leakage public account key leakage test available 221.231.130.170Rsync service enabled sync_dl syncfiletongji syncfilehoutai

Mysql injection and phpinfo at a site of Apsara Stack Mysql injection and phpinfo at a site of Apsara Stack First scanned the phpinfo file, http://my.gfan.com/info.phpThen I want to find the injection and file contains such a vulnerability, so in my.