Cloud Security

QEMU 'vnc. c' Denial of Service Vulnerability (CVE-2015-5239)QEMU 'vnc. c' Denial of Service Vulnerability (CVE-2015-5239) Release date:Updated on:Affected Systems: QEMU Description: Bugtraq id: 76620CVE (CAN) ID: CVE-2015-5239QEMU is an open

FreeType parse_encoding Function Denial of Service Vulnerability (CVE-2014-9745)FreeType parse_encoding Function Denial of Service Vulnerability (CVE-2014-9745) Release date:Updated on:Affected Systems: FreeType Description: CVE (CAN) ID: CVE-

MediaWiki DoS Vulnerabilities (CVE-2015-6733)MediaWiki DoS Vulnerabilities (CVE-2015-6733) Release date:Updated on: 2015-09-02Affected Systems: MediaWiki MediaWiki MediaWiki Description: CVE (CAN) ID: CVE-2015-6733MediaWiki is a famous wiki

MediaWiki thumb. php XSS Vulnerability (CVE-2015-6730)MediaWiki thumb. php XSS Vulnerability (CVE-2015-6730) Release date:Updated on: 2015-09-02Affected Systems: MediaWiki MediaWiki MediaWiki Description: CVE (CAN) ID: CVE-2015-6730MediaWiki

PHP 'zend _ HASH_IF_FULL_DO_RESIZE () 're-exploits the memory corruption vulnerability after being releasedPHP 'zend _ HASH_IF_FULL_DO_RESIZE () 're-exploits the memory corruption vulnerability after being released Release date:Updated on:Affected

PolarSSL Vulnerability (CVE-2014-9744)PolarSSL Vulnerability (CVE-2014-9744) Release date:Updated on:Affected Systems: PolarSSL Description: CVE (CAN) ID: CVE-2014-9744PolarSSL (mbed TLS) is a dual-Authorization Implementation of SSL, TLS

Schneider Electric InduSoft cryptographic Vulnerability (CVE-2015-1009)Schneider Electric InduSoft cryptographic Vulnerability (CVE-2015-1009) Release date:Updated on:Affected Systems: Schneider Electric InduSoft Web Studio Schneider Electric

Adobe Flash Player and AIR Multiple Remote Denial of Service Vulnerabilities (APSB15-16)Adobe Flash Player and AIR Multiple Remote Denial of Service Vulnerabilities (APSB15-16) Release date:Updated on:Affected Systems: Adobe Flash Player Adobe Flash

Remote Code Execution Vulnerabilities in multiple VMware products 'tpview. dll 'and 'tpint. dll'Remote Code Execution Vulnerabilities in multiple VMware products 'tpview. dll 'and 'tpint. dll' Release date:Updated on:Affected Systems: VMWare

Cisco ios xe Software DoS Vulnerability (CVE-2015-0710)Cisco ios xe Software DoS Vulnerability (CVE-2015-0710) Release date:Updated on:Affected Systems: Cisco IOS 15.5 S Description: Bugtraq id: 74386CVE (CAN) ID: CVE-2015-0710Cisco IOS is an

How to use Bastille to reinforce Linux server security? The Bastille reinforcement software can "firmly lock" the operating system and actively configure the system to improve security and reduce the probability of moderate recruitment and

Principles and handling of SYN attacks in Linux security TCP has been developed for more than 30 years since it was invented in 1974 and has become the most important basic Internet Protocol. However, TCP also has some defects. SYN attacks use the

Solve the browser homepage hijacking event caused by the "" plug-in for installing youtubedownloader. Youtubedownloader is a tool used to download videos on the youtube site. It is very convenient to download videos by providing video URLs. However,

The best way to protect passwords may be to create fake passwords. If you need to provide random and independent passwords to a large number of websites, password management software is a good choice. However, the fatal weakness of this method is

Correct use of encryption and authentication technologies Among cryptography experts, "encryption is not authentication" is a simple consensus. However, many developers who do not understand cryptography do not know the meaning of this sentence. If

Eight functions to enhance PHP program Security Security is an important aspect of programming. In any programming language, many functions or modules are provided to ensure program security. In modern website applications, users from all over the

Web SQL injection and packaging   Three injection packagesInjection Point 1: http://www.wepiao.com/?a=filmdetail&c=film&m=web&fid=5452 Fid ParameterInjection Point 2: http://www.wepiao.com/?a=cinemadetailshow&c=cinema&m=web&cinemaid=1002069 Cinemaid

53KF a background MySQL blind note (root) 53KF a background MySQL blind note (root)Detailed description: Injection point:  Code Region POST /check.php HTTP/1.1Content-Length: 166Content-Type: application/x-www-form-urlencodedX-Requested-With:

Bo ol blind injection for a site on cool 6 Bo ol blind injection for a site on cool 6 Injection point:  GET/channel/getFeedInfo? Channel = * & channelme = yes & p = 1 HTTP/1.1X-Requested-With: XMLHttpRequestReferer: http://boke2.ku6.comHost: boke2

A profound understanding of CSRF 0x00 Preface A good friend of the team received Alibaba's offer today, expressing envy. He came back to discuss his experiences and talked about the CSRF problem. He had been familiar with CSRF before, but it's just