Cloud Security

Samsung Galaxy S5 remote code execution vulnerability in CVE-2015-4034)Samsung Galaxy S5 remote code execution vulnerability in CVE-2015-4034) Release date:Updated on:Affected Systems: Samsung Galaxy S5 Description: Bugtraq id: 75403CVE (CAN)

Oracle Java SE Remote Vulnerabilities (CVE-2015-4732)Oracle Java SE Remote Vulnerabilities (CVE-2015-4732) Release date:Updated on:Affected Systems: Oracle Java SE 8u45Oracle Java SE 7u80Oracle Java SE 6u95Oracle Java SE Embedded 8u33Oracle Java

Apache Jackrabbit XML external entity information leakage (CVE-2015-1833)Apache Jackrabbit XML external entity information leakage (CVE-2015-1833) Release date:Updated on:Affected Systems: Apache Group Jackrabbit 2.10.1 Description: Bugtraq id:

The number of OS X vulnerabilities in Secunia's latest quarterly security report ranked first Security company Secunia released its latest quarterly vulnerability update report, covering vulnerabilities found in February to April 2015. It focuses

Novell Zenworks Remote Information Leakage (CVE-2015-0785)Novell Zenworks Remote Information Leakage (CVE-2015-0785) Release date:Updated on:Affected Systems: Novell ZENworks Description: Bugtraq id: 74288CVE (CAN) ID: CVE-2015-0785Novell

Shell script checks the memcache process and automatically restartsRevised version:#! /Bin/sh# Check memcache process and restart if downMm_bin = "/usr/local/bin/memcached"Mm_log = "/home/xxx/memcached_check.log"Mm_ports = ("11211" "11212 ")Mm_param

Quick access to basic Server Information shell scriptsSuccessively run shell scripts (applicable to centos and debian Series)Catcheck. sh #! /Bin/bash # ------------------------------------------------ # Date: June152015 # Author: jimmygong # Mail:

Chaotic Digital Image Encryption Algorithm (1) Abstract: At present, the combination of Chaotic Systems and encryption technology is currently the most popular topic. Although a large number of encryption algorithms are available, these encryption

MetInfo5.3 latest SQL Injection Vulnerability MetInfo5.3 latest SQL Injection Search. php: $module=intval($module); if($class1)$module=0; if(intval($module)){ $serch_sql.=" where lang='$lang' and (recycle='0' or recycle='-1') and

PHPCMS design defects may cause authkey Leakage Kill all v9 versions (conditional ). The swfupload upload page outputs the MD5 (auth_key + sess_id), phpcms \ modules \ attachment \ functions \ global. func. php: initupload Function function

Cooliu game background blind note (root permission, millions of data) The gift is not important. I Want To scatter rank more and change something ~ The problem is here http://wap.szkuniu.com/admin/Capture packets POST /admin/index.php?a=in&m=login

General SQL Injection bypass skills (using mysql features) Directly add syntax select * from users where id=8E0union select 1,2,3,4,5,6,7,8,9,0select * from users where id=8.0union select 1,2,3,4,5,6,7,8,9,0select * from users where id=\Nunion

How can I obtain the user account and password of a flight data system of China Southern Airlines? China Southern Airlines-Flight Data Application System System address: http: // 58.248.56.70  This system has a design defect. In the password

Sohu focal financial wallet multiple CSRF hijacking of arbitrary accounts and Solutions Http://ibank.focus.cn/account/ Token is not set for Multiple sensitive operations in the account.Set the problem csrf poc: 

Shell script Security"#!" Is displayed in the Shell script. /Bin/sh-"usage," #! "/Bin/sh" indicates the Shell type interpreted by the command line. The common type is the sub-type (dialect) Bash Shell of the Bourne Shell, "-" or "-" indicates the

Toutiao's website cookie injection + Source Code leakage + getshell + key Leakage Toutiao's website cookie injection + Source Code leakage + getshell + key Leakage Http: // 42.96.190.138/This site has SQL InjectionThere should be more than oneCookie

Bypass 07073waf to traverse users and hit the database (with poc) 07073 game website waf design defects can cause bypassing. interfaces can traverse users and hit libraries.Appendix Verification poc 1. Registration interface brute-force user

HTML5 Security Analysis: Local Storage In the previous article HTML5 cross-origin message sending security analysis, we discussed cross-origin message transmission in html5. This article will show you another feature-local storage.Local StorageLocal

Common website intrusion methodsAt present, website intrusion has become very simple and the threshold is getting lower and lower. Any cainiao just needs to download the intrusion tool on the hacker's website to start intrusion. Currently, there are

PHP multipart/form-data Remote DOS Vulnerability When PHP parses the body part request header of the multipart/form-datahttp request, repeated copying of strings leads to DOS. A remote attacker sends a maliciously crafted multipart/form-data Request,