Cloud Security

Adobe Flash Player/AIR Information Leak Vulnerability (CVE-2014-8437) Release date:Updated on: Affected Systems:Adobe Flash Player 15.xAdobe Flash Player 14.xAdobe Flash Player 13.xAdobe Flash Player 11.xDescription:Bugtraq id: 71036CVE (CAN) ID:

Detailed analysis and reproduction of CVE-2014-33930x00 vulnerability introduction: Cisco Adaptive Security Appliance (ASA) Software has a Security vulnerability in the implementation of the custom Clientless ssl vpn entry framework.

EspoCRM '/install/index. php' Cross-Site Scripting Vulnerability Release date:Updated on: Affected Systems:EspoCRM EspoCRMDescription:Bugtraq id: 70806CVE (CAN) ID: CVE-2014-7987 EspoCRM is an open source customer relationship management software.

MuPDF 'xps _ parse_color () 'function Stack Buffer Overflow Vulnerability Release date:Updated on: Affected Systems:MuPDF, MuPDF 1.3Description:--------------------------------------------------------------------------------Bugtraq id: 65036

VMware Support Insecure File Access Vulnerability (CVE-2014-4200) Release date:Updated on: Affected Systems:VMWare VMware Support Tool 0.88Description:--------------------------------------------------------------------------------Bugtraq id: 69410

Multiple security restriction bypass vulnerabilities in JBoss Operations Network Release date:Updated on: Affected Systems:RedHat JBoss Operations Network 2.4.1Unaffected system:RedHat JBoss Operations Network 2.4.2Description:---------------------

SaltStack Salt multiple insecure temporary file creation vulnerabilities (CVE-2014-3563) Release date:Updated on: Affected Systems:SaltStack salt Description:--------------------------------------------------------------------------------Bugtraq

Cisco IOS Software Remote Denial of Service Vulnerability (CVE-2014-2131) Release date:Updated on: Affected Systems:Cisco IOS 15.3Cisco IOS 15.2Cisco IOS 12.xDescription:------------------------------------------------------------------------------

Analysis on the Remote Code Execution Vulnerability of Xiaomi mobile MIUIAuthor: Song shenlei  Reprinted please indicate the source http://blogs.360.cn/360mobile/2014/08/25/miui-rce-vul/ In July, when I studied the webview vulnerability, I tested

Ignite Realtime Smack 'hostname' verification SSL Certificate Security Restriction Bypass Vulnerability Release date:Updated on: Affected Systems:Ignite Realtime Smack Description:--------------------------------------------------------------------

PineApp Mail-SeCure 'test _ li_connection.php 'Remote Command Injection Vulnerability Release date:Updated on: 2013-07-30 Affected Systems:PineApp Mail-SeCure SeriesDescription:-----------------------------------------------------------------------

Use Python for TCP packet injection (forgery)Packet injection is to build any protocol (TCP... UDP ...) Then, the original socket transmission method is used to impede the process. This method is widely used in network penetration testing, such as

CentOS SYSTEM account and logon Security 1. reasonably use the Shell history Command record Function In Linux, you can use the history command to view all the user's historical operation records, and the shell command operation records are stored in

Dongle's latest version V3.3 bypass interception Injection Vulnerability There is a problem with the interception and filtering of the latest version of dongle, which can bypass interception for injection.I discovered this vulnerability in V3.1 and

Install SecureCRT 14.10 on Ubuntu 7.3Install SecureCRT 14.10 on Ubuntu 7.31 and prepare the softwareUbuntu14.10 x64SecureCRT7.3 version: scrt-7.3.0-657.ubuntu13-64.x86_64.deb:Http://www.vandyke.com/download/securecrt/download.html2. Install

Emlog blog front-end reflective XSS (ignore browser filter) Test on the official host site: Http://host.emlog.net/include/lib/js/uploadify/uploadify.swf? MovieName = % 22] % 29} catch % 28e % 29 {if % 28! Window. x % 29 {window. x = 1; alert %

Blind Return Oriented Programming (BROP) Attack-Attack Principle0x00 Preface The first time I posted an article in WooYun, I don't know whether it matches the taste of the audience. This article is translated to my blog and mainly introduces a type

Cross-origin vulnerability in Android built-in browsers (UXSS)Link: http://www.rafayhackingarticles.net/2014/08/android-browser-same-origin-policy.html Test link: http://x7s.pw/001.html Cause: Because Android's built-in browser uses the old

Blue Coat discloses security risks arising from "one-day tour" Websites October 22, September 1, 2014-Blue Coat, a leading business support technology vendor, announced today that 71% of website host names appear for only 24 hours. Although the

20 webshell elevation servers 1, SER-TU elevation (usually using SERFTP server management tools, first you need to find the INI configuration file under the installation directory, must have the write permission)2. RADMIN Privilege Escalation (no