Cloud Security

Polar bastion host common user command execution (root permission)Brief description: Polar internal control bastion hosts use advanced technologies to protect internal network devices and servers, and monitor and audit common access methods for

IBM DB2/DB2 Connect information leakage (CVE-2014-0919)IBM DB2/DB2 Connect information leakage (CVE-2014-0919) Release date:Updated on:Affected Systems: IBM DB2 Connect 9.xIBM DB2 Connect 10.xIBM DB2 9.xIBM DB2 10.x Description: CVE (CAN) ID:

Dnsmasq "setup_reply ()" DoS VulnerabilityDnsmasq "setup_reply ()" DoS Vulnerability Release date:Updated on:Affected Systems: Dnsmasq Description: CVE (CAN) ID: CVE-2015-3294Dnsmasq is a lightweight DNS forwarder and DHCP server.Dnsmasq has a

Quassel Remote Denial of Service Vulnerability (CVE-2015-2779)Quassel Remote Denial of Service Vulnerability (CVE-2015-2779) Release date:Updated on:Affected Systems: Quassel IRC Team Quassel 0.12-rc1 Description: Bugtraq id: 74048CVE (CAN) ID:

Oracle Java SE Remote Vulnerabilities (CVE-2015-0470)Oracle Java SE Remote Vulnerabilities (CVE-2015-0470) Release date:Updated on:Affected Systems: Oracle Java SE 8u40 Description: Bugtraq id: 74149CVE (CAN) ID: CVE-2015-0470Java SE is short

Das_watchdog 'xauthority 'Environment Variable Processing Buffer Overflow VulnerabilityDas_watchdog 'xauthority 'Environment Variable Processing Buffer Overflow Vulnerability Release date:Updated on:Affected Systems: Debian das-watchdog 0.9.0-2

Make the smart lock more intelligent (Black off the August smart lock) Introduction:In the Security guide released by the hacker Security Week recently held by Security Compass, we decided to study the smart Lock Device and evaluate the current

Multiple Arbitrary life-saving execution vulnerabilities in the TerraMaster NAS Network Storage Server The TerraMaster NAS network storage server has multiple arbitrary command execution vulnerabilities. Inspired by YY-2012 WooYun-2015-95059, I made

Malicious Code Analysis System Self-protection mechanism bypass causes binary Leakage The fireeye malicious code analysis system is a malicious code analysis tool released by Kingsoft on the Internet. You can register an account and submit

In Linux, how does one-time password Ensure SSH login security? (1) Security is a process rather than a product. Although the SSH protocol is designed with a password, it is very secure, but if it is not properly managed: whether it is a weak

Analyze a js backdoor of WordPress We recently found a backdoor for collecting Administrator Logon creden on many WordPress sites. The victim website is inserted with hidden code. When the Administrator logs on, the code is triggered, the

How can I use xss to access the codoon network data background? 0x00 insert xss codoon android client motion circle dynamic comments can enter xss, in order to get the background url, I commented on the dynamic codoon xiaobian Not bad0x01 does not

You can reset the password of any user if you are not properly designed. First, I applied for an account to test the product. But what I never expected was that the design of the website was full of loopholes. Let's talk about the problem from an

Micro-client database leakage on a micro-site Database leakage on a microsite Http://www.vcooline.com/There are many major customers on the homepage.Source code, pants, and

Command Execution + getshell (leakage of name, phone number, ID card number, bank card number, etc) The system address is: Http://www.jsbbzy.com/manage/basepage/login_init.action  St2 vulnerability + getshell:  Command Execution:  Upload

A website of Pipi network is improperly configured. Getshell affects dozens of websites.   Struct2 Command Execution http://entuser.pipi.cn: 8080/loadvote. actionThe following is the website root directory  The following is the website root

WordPress slide plug-in RevSlider vulnerability Exploitation Arbitrary read: /Wp-admin/admin-ajax.php? Action = revslider_show_image & img = ../wp-config.php Arbitrary upload: #!/usr/bin/perl## Title: Slider Revolution/Showbiz Pro shell upload

Lenovo's SQL injection (tens of millions of users) I would be drunk if I was using a small vendor .. Check the data Website: http://think.lenovo.com.cn/Manual test shows an injection pointHttp://think.lenovo.com.cn/stations/Api/QueryMap.ashx? Area =

A sub-station of China Unicom, such as SQL injection and GETSHELL, affects the permissions of any user, such as "wo + pass/email ". Start with injection: View the original str2 vulnerability address: forbiddenURL: http://m.unisk.cn/Count2.asp? Id = 1

Grid WIFI injection leaks tens of thousands of O2O merchant information and Wi-Fi passwords Grid WIFI has an injection vulnerability, which allows you to download information of all merchants, log on to the background, and use Wi-Fi passwords. An