Cloud Security

Oracle Retail Applications Remote Security Vulnerability (CVE-2015-4827)Oracle Retail Applications Remote Security Vulnerability (CVE-2015-4827) Release date:Updated on:Affected Systems: Oracle Retail Applications 3.0 Description: CVE (CAN) ID:

IcedTea-arbitrary Web code injection vulnerability (CVE-2015-5234)IcedTea-arbitrary Web code injection vulnerability (CVE-2015-5234) Release date:Updated on:Affected Systems: IcedTea-Web IcedTea-Web 1.6.x-1.6.1 Description: CVE (CAN) ID: CVE-20

NTP 'ntpd/ntp_config.c 'Denial of Service Vulnerability (CVE-2015-5195)NTP 'ntpd/ntp_config.c 'Denial of Service Vulnerability (CVE-2015-5195) Release date:Updated on:Affected Systems: NTP 4.x Description: Bugtraq id: 76474CVE (CAN) ID: CVE-201

PHP 'zend/zend_alloc.c' Memory Corruption VulnerabilityPHP 'zend/zend_alloc.c' Memory Corruption Vulnerability Release date:Updated on:Affected Systems: PHP Description: Bugtraq id: 76646PHP is a widely used scripting language. It is

Moxa SoftCMS Buffer Overflow Vulnerability (CVE-2015-6458)Moxa SoftCMS Buffer Overflow Vulnerability (CVE-2015-6458) Release date:Updated on:Affected Systems: Moxa SoftCMS Description: CVE (CAN) ID: CVE-2015-6458Moxa SoftCMS is a central

Cisco ASR 1000 series router Denial of Service Vulnerability (CVE-2015-6272)Cisco ASR 1000 series router Denial of Service Vulnerability (CVE-2015-6272) Release date:Updated on:Affected Systems: Cisco ios xe 2.3.0Cisco ios xe 2.1.0-2.2.3

MediaWiki thumb. php XSS Vulnerability (CVE-2015-6729)MediaWiki thumb. php XSS Vulnerability (CVE-2015-6729) Release date:Updated on: 2015-09-02Affected Systems: MediaWiki MediaWiki MediaWiki Description: CVE (CAN) ID: CVE-2015-6729MediaWiki

HP KeyView arbitrary code execution vulnerability in CVE-2015-5419)HP KeyView arbitrary code execution vulnerability in CVE-2015-5419) Release date:Updated on:Affected Systems: HP KeyView HP KeyView Description: CVE (CAN) ID: CVE-2015-5419HP

Wireshark epan/proto. c Remote Denial of Service Vulnerability (CVE-2015-6241)Wireshark epan/proto. c Remote Denial of Service Vulnerability (CVE-2015-6241) Release date:Updated on:Affected Systems: Wireshark Wireshark 1.12.x Description: Bugtraq

Microsoft fixed the Remote Code Execution Vulnerability of IE. Microsoft urgently released patches to fix high-risk vulnerabilities in IE. Microsoft's security bulletin does not explain the details of a vulnerability, but simply says that

WordPress Swim Team plugin 'download. php' Arbitrary File download VulnerabilityWordPress Swim Team plugin 'download. php' Arbitrary File download Vulnerability Release date:Updated on:Affected Systems: WordPress Swim Team 1.44.10777WordPress Swim

CentOS intrusion through log Lookup View log files Linux/var/log/wtmp file view suspicious IP Login Last-f/var/log/wtmp This log file permanently records the logon, logout, and system startup and shutdown events of each user. Therefore, as the

Yisaitong data leakage protection system SQL Injection Vulnerability (no DBA permission required)   SQL Injection exists on the WAP logon page of the DLP System (no DBA permission required)    POST /CDGServer3/3g/LoginAction HTTP/1.1Host: 116.213.17

ThinkPHP webshell skills Someone on 90sec asked, I said there are still some tips that can't be used. I noticed when I audited TP last year. I simply analyzed the code and operation process. The I function of thinkphp is the function for processing

Use a whitelist to bypass 360 instances 0x00 Preface Recently, subTee introduced in his blog how to use the white list to bypass protection, but there are bugs in the details. Therefore, this article only describes how to fix the bug and use this

Nodeclub injection vulnerability allows you to reset your password This nodeclub (https://github.com/cnodejs/nodeclub/) may be used by a small number of people, get to play to download the nodeclub source code from github. \ Controllers \ sign.

SQL injection vulnerability in express it Management System Place: POSTParameter: PDA_SN Type: boolean-based blind Title: AND boolean-based blind - WHERE or HAVING clause Payload: PDA_Type=&PDA_SN=X30013040448' AND 1496=1496 AND

Any user information can be queried if Guohua life insurance is improperly designed (with script) Improper design, allows you to query any user information The problem lies in China Life's password retrieval:

Problems caused by improper Mysql configuration at China Unicom Due to administrator negligence, mysql is started with the -- skip-grant-tables parameter.Control China Unicom's Electronic Ticket System (containing hundreds of thousands of customer

Analysis of a Chrome XSS Filter Bypass Original PoC: https://localhost/ The patch is as follows: Indehttp://www.2cto.com/Article/201507/x: Source/core/html/parser/XSSAuditor.cppt a/Source/core/html/parser/XSSAuditor.cpp