Cloud Security

SAP BusinessObjects Explorer Information Leakage Vulnerability Release date:Updated on: Affected Systems:SAP BusinessObjectsDescription:Bugtraq id: 70382 SAP BusinessObjects is a business intelligence software and Enterprise Performance solution.

Node. js syntax-error component 'eval () 'Function Arbitrary Code Execution Vulnerability Release date:Updated on: Affected Systems:Nodejs NodejsDescription:Bugtraq id: 70105 Node. js is a platform built on Chrome's JavaScript runtime environment

Some Insecure Default LNMP configurations LNMP is a one-click nginx + php + mysql Environment Program in many Linux systems in China. However, the default configuration of the program is poor, which may cause security problems. However, the problem

Vulnerability patch bypass AnalysisDuring the day, we were busy with vulnerability response, server testing and fixing, vulnerability impact scope statistics, and so on until we finally had time to analyze the vulnerability. The first patch

The latest Basic Bash vulnerability repair solution Bash broke the remote parsing Command Execution Vulnerability (CVE-2014-6271), spread to the major Linux distributions and MacOSX system. Attackers can remotely execute arbitrary commands in

Xen 'hvmop _ track_dirty_vram () 'Local Denial of Service Vulnerability Release date:Updated on: Affected Systems:XenSource XenDescription:Bugtraq id: 70055 Xen is an open-source Virtual Machine monitor developed by the University of Cambridge.

NetBSD Kernel "setsockopt ()" DoS Vulnerability Release date:Updated on: Affected Systems:NetBSD 6.1-6.1.4NetBSD 6.0-6.0.4Description:NetBSD is a free and highly customizable Unix-like operating system suitable for multiple platforms, from 64-bit

Reexploit Remote Code Execution Vulnerability (CVE-2014-3178) after Google Chrome is released) Release date:Updated on: Affected Systems:Google Chrome Description:Bugtraq id: 69709CVE (CAN) ID: CVE-2014-3178 Google Chrome is a Web browser tool

S3QL "pickle. loads ()" Arbitrary Code Execution Vulnerability Released on: 2014-09-04Updated on: 2014-09-05 Affected Systems:S3QL S3QL S3QL S3QL Description:--------------------------------------------------------------------------------CVE (CAN)

An in-depth process of roaming letv Intranet The Leeco Intranet roaming process is not very in-depth, so it takes too little time to penetrate it.The first step is to collect information, taking the mailbox as the portal, such as searching for email

Feixun vro unauthorized direct shell Note: All versions are not kill. Feixun vro has an unauthorized vulnerability. Once connected to wifi (you can understand this), you can directly view the vro status or even use shell.-- Taking FWR-601H as an

CentOS firewall settings and Optimization 1. Set host firewall. Open: SERVER: web Service, vsftpd file service, ssh remote connection service, and ping request. 1. Open the sshd service Data packets are sent to the local host through port 22.[Root @

Why does Google rush to kill the encryption algorithm SHA-1 (1) Hilbert graph of the hash algorithm (provided by Ian Boyd) The official Google blog announced that it will gradually reduce the security instructions for SHA-1 certificates in Chrome.

Huilin host system API Vulnerability can cause plaintext password de-Database WinIIS is the host system with the highest market share in China (none), which has a big impact ~ Tens of thousands of domain names were maliciously parsed at the end of

Sogou flash email parallel Privilege Escalation Vulnerability   I like to mark this secure mailbox.1. Unauthorized editing of sogou mail address group1. User A enters the pop-up email, creates A new group sister in the address book, and edits the

PageAdmin can bypass authentication to forge arbitrary user identity login (front-end, back-end) It turns out that there was a verification, but I accidentally thought of a way to bypass it.Let's talk about the process first: Front-end:Initial

Cmseasy latest version (20140718) stored XSS blind playing background Stored XSS supports blind access to the backend ~/Lib/table/stats. php 13 rows getbot function:   public static function getbot() { $ServerName = $_SERVER["SERVER_NAME"];

58 local storage-type XSS (loading JS with 25 characters) + posts with any mobile phone number deleted and repaired Without saying this, I spent all my energy on the primary domain. In addition, I would like to thank parsec for your thoughts and

Cmseasy SQL injection vulnerability 3 and repair Injection ..When posting an article in bbs, the $ _ POST data is directly brought into the concatenated SQL function, resulting in injection. /Bbs/add-archive.php 30 rows  if($id = $archive->inserData(

A oa system does not need to log on to GetShell You do not need to log on to GetShell in an OA system. The official demo has been GetShell.Official: http://www.qioa.cn/ Kai Lai OA (including Standard Edition, government affairs office, Education