Cloud Security

Adobe ColdFusion XSS Vulnerability (CVE-2015-8053)Adobe ColdFusion XSS Vulnerability (CVE-2015-8053) Release date:Updated on:Affected Systems: Adobe ColdFusion 〈 11 Update 7Adobe ColdFusion 〈 10 Update 18 Description: CVE (CAN) ID:

Libxml2 Denial of Service Vulnerability (CVE-2015-1819)Libxml2 Denial of Service Vulnerability (CVE-2015-1819) Release date:Updated on:Affected Systems: Libxml libxml2 Description: CVE (CAN) ID: CVE-2015-1819Libxml2 is an XML Parser and markup

Reuse Vulnerability after OpenSMTPD release (CVE-2015-7687)Reuse Vulnerability after OpenSMTPD release (CVE-2015-7687) Release date:Updated on:Affected Systems: Opensmtpd Description: CVE (CAN) ID: CVE-2015-7687OpenSMTPD is a free

HP ArcSight Logger SOAP interface Vulnerability (CVE-2015-6029) Release date:Updated on:Affected Systems: HP ArcSight Logger Description: CVE (CAN) ID: CVE-2015-6029HP ArcSight Logger is a log management software tool.In versions earlier than

Mass leakage of Netease Mail User Information Security researchers said that Netease's 163/126 million mailboxes leaked hundreds of millions of data records, involving email accounts, passwords, and user password protection. Netease mail claims to

PHP 'zend/zend_alloc.c' Memory Corruption VulnerabilityPHP 'zend/zend_alloc.c' Memory Corruption Vulnerability Release date:Updated on:Affected Systems: PHP Description: Bugtraq id: 76646PHP is a widely used scripting language. It is

Cisco FirePOWER 7000/8000 Denial of Service Vulnerability (CVE-2015-6307)Cisco FirePOWER 7000/8000 Denial of Service Vulnerability (CVE-2015-6307) Release date:Updated on:Affected Systems: Cisco Firepower 1, 8000Cisco Firepower 1, 7000

QEMU NE2000 NIC simulation Heap Buffer Overflow VulnerabilityQEMU NE2000 NIC simulation Heap Buffer Overflow Vulnerability Release date:Updated on:Affected Systems: QEMU Description: Bugtraq id: 76746CVE (CAN) ID: CVE-2015-5279QEMU is an open

CentOS6.7 enhanced system optimization script #! /Bin/bash # Author wangqd # Description: this is a centos6.7 optimization script # Processname: upgrade the system, streamline services, install basic configurations, record bash execution time,

Identity Mixer, an IBM encryption tool platform, has been available to developers recently. First, this is good news for many developers. Developers are now able to encrypt important data on apps developed at the enterprise level. Identity Mixer is

SQL injection vulnerability in the APP SQL injection vulnerability in the APP The "good loan APP" of good loan Network detected a time-blind injection on the following URLs. The injection parameter is

DockerMaze maze challenge write-up November 16 this year ~ On the 17th, in Dockercon eu 2015 held in barsarona, Schibsted Team released a DockerMaze challenge, which is similar to the game running out of the maze in 1990s. In this game, you wake up

DZ6.x UC_KEY getwebshell exploit Dz is available online. the uc_key exploitation method of the x and dz x Series met a website named dz6.0 today, so I analyzed the code, changed the exploitation program, and shared it with the people who needed it.

Discuz X1.5 uses adding friends to store xss for worm Spread Discuz X1.5 stores xss at the place where friends are added. xss interacts with users to spread the worm index. Position: Add a friend Effect after x Triggered after clicking OK with

Cheyi Pai has the SQL injection vulnerability on a platform (sqlmap around waf) Cheyipai merchant login platform has POST-type SQL injection, which can leak merchant Information Http://rz.cheyipai.com/The data packet is as follows, and username is

PHP: eight security-related functions Security issues are an important part of programming languages. In almost any practical language, some functions, modules, or other functions are provided to ensure security. In the modern Internet, we often

The source code of an apicloud website is leaked. Getshell further affects members. The leakage of source code affects 17 W members. Http://community.apicloud.com/bbs.zip   View the uc_key. discuz has a great risk of keys. You can reset any user

Getting started with docker This article was originally published by fireaxe and can be freely copied and reproduced using GPL. However, for reprinting, please maintain the integrity of the document and indicate the original author and original

Fanwe O2O commercial system SQL injection vulnerability + XXE entity Injection Fanwe O2O, demo site address: http://o2odemo.fanwe.net//cpapi/qxtapi.php define("FILE_PATH","/cpapi");require_once '../system/system_init.php';$ip = CLIENT_IP;$xml = file_

Decryption: How attackers step by step win your WhatsApp Database   This document describes how to remotely attack and decrypt the WhatsApp database on a root Android mobile device. In addition, this reminds us that root or jailbreak (iOS) mobile