Cloud Security

A Research on a suspicious Payload Letter difference When we find suspicious Payload, we will try to study it. Maybe they won't have any problems during our detection, but it doesn't mean they have no problems. A Payload found under a website is an

Umbraco CMS TemplateService component update Function Arbitrary Code Execution Vulnerability Release date:Updated on: Affected Systems:Umbraco CMS Description:CVE (CAN) ID: CVE-2013-4793 Umbraco is an open source CMS Content Management system. It is

Apache Traffic Server 'httptransact. CC' DoS Vulnerability Release date:Updated on: Affected Systems:Apache Group Traffic Server 5.0.0-5.1.1Description:Bugtraq id: 71879 Apache Traffic Server is a scalable HTTP/1.1 compliant cache proxy Server.

Google discloses unrepaired Windows 8.1 Security Vulnerabilities Google's security research database automatically discloses a Microsoft unrepaired Windows 8.1 Security Vulnerability 90 days later. For Google's 90-day automatic disclosure mechanism,

GNU glibc 'getanswer _ r () 'function infinite loop Denial of Service Vulnerability Release date:Updated on: Affected Systems:GNU glibc 2.xDescription:Bugtraq id: 71670 Glibc is the implementation of C libraries in most Linux operating systems.

Record a wonderful out-of-the-stars Elevation of PrivilegeI won't talk about the shell process. I can directly say that the Elevation of Privilege supports aspx, taking a lot of detours from path d: \ freehost \ xxxxxxxxx \ web \, we can see that it

Google Chrome information leakage (CVE-2014-7909) Release date:Updated on: Affected Systems:Google Chrome Description:Bugtraq id: 71167CVE (CAN) ID: CVE-2014-7909 Google Chrome is a Web browser tool developed by Google. Chrome versions earlier than 3

FFmpeg and Libav cross-border Denial of Service Vulnerability (CVE-2014-8548) Release date: 2014-3 3Updated on: Affected Systems:FFmpeg FFmpegDescription:Bugtraq id: 70888CVE (CAN) ID: CVE-2014-8548 FFmpeg is a free software that allows you to

Ruby on Rails Action Pack component information leakage (CVE-2014-7818) Release date:Updated on: Affected Systems:Ruby on RailsDescription:Bugtraq id: 70789CVE (CAN) ID: CVE-2014-7818 The Action Pack component is the Convention for building and

This year is an unfortunate year For TLS. All major TLS stacks are found to have high-risk vulnerabilities. Microsoft disclosed a high-risk vulnerability that affects all Windows versions. Windows users, especially website users, need to

Juniper JunosE Denial of Service Vulnerability (CVE-2014-6378) Release date: 2014-10-09Updated on: Affected Systems:Juniper Networks JUNOSeDescription:Bugtraq id: 70363CVE (CAN) ID: CVE-2014-6378 JunosE is an operating system used in the e-series

Ao you cloud Browser Remote privacy Leak Vulnerability (certain conditions are required) The intent protocol header is used for browser resolution. If the processing problem is solved, the unexported component can be opened remotely, and

Apt Security Restriction Bypass Vulnerability (CVE-2014-0487) Release date:Updated on: Affected Systems:Ubuntu aptDescription:Bugtraq id: 69836CVE (CAN) ID: CVE-2014-0487 The apt package is the advanced frontend of dpkg. When APT does not comply

Linux Kernel 'smb2 _ tcon 'NULL pointer indirect reference Denial of Service Vulnerability Release date:Updated on: Affected Systems:Linux kernelDescription:Bugtraq id: 69867 Linux Kernel is the Kernel of the Linux operating system. Linux kernel

Hacker game Follow-up: Starting from Goal games A few days ago, I saw a simple and beautiful hacker programming game, so I almost chewed it ~, I also gave it to my colleagues. The code is very simple, but the idea is not clear, it is difficult to

Lenovo's Discuz Forum MySQL injection script MySQL injection at a Discuz forum in Lenovo, tested several timesScript for guessing Suspected Discuz injection introduced by Lenovo's secondary development. ThinkPad

Phpwind background account password can be cracked and verification code can be ignored   Let's take a look at the official website.Http://www.phpwind.net/admin.php  Verification code availableThen let's take a

A high-risk PHPWIND shell Vulnerability I didn't expect PHPWIND to commit the same vulnerability as PHPCMS. Code in src/applications/windidserver/api/controller/AppController. php: public function listAction() {$result = $this->_getAppDs()->getList()

OAsql injection vulnerability in a school's Integrated Management Platform (affecting a large number of schools)   A large number of schools use this system management platform to discover no vulnerabilities, but this system comes with a set of OA

Netease mailbox can read files at a location of XXE Netease mail supports online storage upload and the XXE vulnerability in uploading docx file Preview Unbind the docx file and modify word/document. xml:  ]>test