Cloud Security

Siemens ruggedcom rox-based device Authentication Bypass Vulnerability (CVE-2015-7871) Affected Systems: Siemens ruggedcom rox Description: CVE (CAN) ID: CVE-2015-7871Siemens ruggedcom rox-based devices are used to connect devices in harsh

SearchBlox DoS Vulnerability (CVE-2015-7919)SearchBlox DoS Vulnerability (CVE-2015-7919) Release date:Updated on:Affected Systems: SearchBlox 8.3 Description: CVE (CAN) ID: CVE-2015-7919SearchBlox is a Web-based Attribute search

Arbitrary Command Execution Vulnerabilities (CVE-2015-6934) across VMware Products)Arbitrary Command Execution Vulnerabilities (CVE-2015-6934) across VMware Products) Release date:Updated on:Affected Systems: VMWare VMware vCenter Orchestrator

What's wrong: New Linux Attack and Defense Technology   The focus of any malware research is generally on where the expected attack may be targeted or where it is already under attack, so as to develop and implement new defense technologies. I

Shell can threaten the Intranet caused by improper configuration of a System in China Mobile Improper configuration causes shell to threaten the IntranetDetailed description: **. **: 8000/MMSSender What does the appearance look like?Let's go to the

Linux kernel Denial of Service Vulnerability (CVE-2015-7833)Linux kernel Denial of Service Vulnerability (CVE-2015-7833) Release date:Updated on:Affected Systems: Linux kernel 〈 4.2.3 Description: CVE (CAN) ID: CVE-2015-7833Linux Kernel is the

Attackers hijack thousands of WordPress websites to infect visitors Security company Sucuri reported that attackers are hijacking thousands of WordPress websites to infect unsuspecting visitors. The attack started 15 days ago, but within 48 hours

Wireshark ZigBee parser DoS Vulnerability (CVE-2015-6244)Wireshark ZigBee parser DoS Vulnerability (CVE-2015-6244) Release date:Updated on:Affected Systems: Wireshark Wireshark 1.12.x Description: Bugtraq id: 76383CVE (CAN) ID:

IOS jailbreak device Trojan TinyV appears Claud Xiao, a security researcher at Palo Alto Networks, recently published an article about the analysis of the new Trojan "TinyV. Security company Palo Alto Networks found the trojan in OctoberPalo Alto

One SMS Trojan tracking and analysisVirus features Program name: Photo Album Image Package name: com.net.cn Program size: 323 K (331,603 bytes) Mobile phone hardware: MI3/China Mobile Security Software: LBE Security Master/ZjdroidHook

Mengniu Remote Code Execution Vulnerability obtain the highest privilege weak password of an Intranet Server Mengniu remote code execution vulnerability allows you to gain root privileges and roam the Intranet Http: // 222.74.204.53: 80/Weblogic

Improper configuration of a substation in Baidu (the whole site source code can be downloaded to leak some sensitive information) Baidu, you will know Because the website is almost static and has no interaction, so... Code Region http://efe.baidu.

Run a command somewhere in the home of Beijing RTDetailed description: Jboss invoker/JMXInvokerServlet Code ExecutionThe http://oa.juran.com.cn: 8086/invoker/JMXInvokerServletProof of vulnerability: Solution: Security suggestion: add an access

Misuse Accessibility service to automatically install applications 0x00 malicious application Overview In recent years, many android markets have implemented root-free installation applications, that is, the download is completed and automatically

Cheyi Pai has the SQL injection vulnerability on a platform (sqlmap around waf) Cheyipai merchant login platform has POST-type SQL injection, which can leak merchant Information Http://rz.cheyipai.com/The data packet is as follows, and username is

Analysis of server template injection attacks (SSTI) At this year's Black Hat conference, James Kettle explained "Server-Side Template Injection: RCE for the modern webapp", from the formation of Server Template Injection to detection, the

The tiger sniffing main site is successfully played blindly (already in the background) It's time to show the power of XSS! 0x01Run a question first .. WooYun: Tiger sniffing main site design defects lead to weak password user risks The Credential

Discuz full-version storage XSS Analysis Discuz sets the post administrator's function to edit comments in the user comments. due to improper processing of the front-end JS Code, the maliciously constructed comments form an XSS after interaction.

A website in CSDN has the SQL blind injection vulnerability. Http://edu.csdn.net/courses? Attr = 3 & c_id = 0 & level = 1 payload: blind Note 1 = 1 Parameter: level (GET) Type: boolean-based blind Title: AND boolean-based blind-WHERE or HAVING

SQL Injection for another sub-station in langang Injection point: http://fr.linekong.com/xml/common.php?sort_id=* The sort_id parameter has SQL injection.  Sqlmap identified the following injection points with a total of 2179 HTTP (s) requests: ---