Cloud Security

WebKit Memory Corruption Vulnerability (CVE-2014-4473) Release date: 2014-3 3Updated on: 2014-6 6 Affected Systems:WebKit Open Source Project WebKit 1.2.XDescription:Bugtraq id: 71444CVE (CAN) ID: CVE-2014-4473 WebKit is an open-source browser

Safari/Android browser full-version URL Spoofing Vulnerability   The problem exists in the full version of the android standard browser and the full version of the safari (desktop/mobile) browser.POC: http://kcal.pw/t5.htm https://baidu.com In terms

Huawei P2 Local Privilege Escalation Vulnerability (CVE-2014-2273) Release date:Updated on: 2014-3 3 Affected Systems:Huawei P2Description:Bugtraq id: 71374CVE (CAN) ID: CVE-2014-2273 Huawei P2 is a smartphone of the Android system. The local

MantisBT 'core/current_user_api.php 'PHP Object Injection Vulnerability Release date: 2014-12-01Updated on: 2014-3 3 Affected Systems:Mantisbt 1.1.0a3-1.2.17Description:Bugtraq id: 71361 MantisBT is a Web-based bug Tracking System. MantisBT 1.1.0

ClamAV "cli_scanpe ()" Buffer Overflow Vulnerability Release date:Updated on: Affected Systems:ClamAV Description:CVE (CAN) ID: CVE-2014-9050 Clam AntiVirus is a Unix GPL AntiVirus tool kit, which is used by many email gateway products. ClamAV

Baidu guard Local Denial of Service This vulnerability is used to construct the botnet Baidu guard process, so that users cannot use all functions of Baidu guard. After baiduan.exe is created, the program logic suspends. No matter you click the

Configure the access control list ACL in Linux In Linux, the traditional permission setting method is simple. There are only three identities and three permissions. You can use commands such as chmod and chown to set the permissions or owner of a

Imagemagick PCX parser local memory destruction Vulnerability (CVE-2014-8355) Release date:Updated on: Affected Systems:ImageMagick 6.8.9-9Description:Bugtraq id: 70839CVE (CAN) ID: CVE-2014-8355 ImageMagick is an open-source image viewing and

EMC Avamar cryptographic Vulnerability (CVE-2014-4623) Release date:Updated on: Affected Systems:EMC Avamar 6.xDescription:Bugtraq id: 70732CVE (CAN) ID: CVE-2014-4623 EMC Avamar is a remote backup and recovery solution. EMC Avamar Data Store

How can I control 100 + days of Rongxin security devices within 2 hours? Let's see how I intrude 100 TopSec security devices within two hours, get admin permissions, and build botnets. The firewall, VPN, or something is included. The picture is

Two Methods for calling/referencing/containing another script file in Shell Script first (test example 1) 1 #! /Bin/bash 2 Echo 'Your are in first file' Q) is another script file called in the current script file? Method 1: Use source

74cms (20141020) Global SQL Injection filtering bypass 74cms_v3.5.20.20151120Attackers can bypass global SQL Injection filtering. The defined function utf8_to_gbk (). The Code is as follows: function utf8_to_gbk($utfstr) {global $UC2GBTABLE;$okstr =

SQL blind injection and solutions for a mall in jiuyou For large game websites, injection is very harmful. For example, I inserted a data item in the item to increase the game gold coins. Sell gold coins to local tyrants at a low price. Affected

Any password reset for the general security business of a system integration service provider of China Telecom ?) Believe it or not?  Http://www.jsict.com/Jiangsu hongxin System Integration Co., Ltd. Product: Tianyi Shopping MallTianyi taobaodian

A problem occurs on the lagu network, causing other users' resumes to be downloaded (sensitive data such as tokens can be obtained) Today, I saw a photo on the Internet !!! 40 k monthly salary !!!! Here, I can only go to the web site to get a feel

Reset the password of any account in China Mobile 12580 Mall (batch modification allowed) Reset the password of any account in China Mobile 12580 Mall (batch modification allowed)Can be modified without any verification The original password is to

Session verification for backup data of a general system is lax The session verification of backup data in a general system is lax, and the file name cannot be strictly controlled. getshell =  Backup. php ob_start (); error_reporting (0); include (

A collection of vulnerabilities in a weaver system (not a qualified white hat without shell) With the previous SQL injection, you can easily obtain a Logon account. During the test, two systems with weak passwords were found to log on directly (no

Multiple vulnerabilities in rice cms combined into shell First, let's talk about his xss. Almost no filtering. (Register an account and modify user information)Register an account first.  After the registration is successful, we will not care.Wait

Apache Mina Development Manual IV Apache Mina Development Manual IV 1. Main steps of Mina Development 1. Create a class that implements the IoService Interface The IoService interface has two subinterfaces:1) IoAcceptor interface for Servers2)