Cloud Security

Linux Kernel: isofs endless loop This problem is very similar to the CVE-2014-5472, but the root cause is different, is the kernel in the processing of the Rock type file expansion of the endless loop problem. This problem is caused by the isofs

Linux Kernel 'sk _ dst_get () 'DoS Vulnerability Release date:Updated on: Affected Systems:Linux kernelDescription:Bugtraq id: 72435 Linux Kernel is the Kernel of the Linux operating system. Linux Kernel has a denial of service vulnerability in

Oracle VM VirtualBox local vulnerabilities (CVE-2014-6589) Release date:Updated on: Affected Systems:Oracle VM VirtualBox Description:Bugtraq id: 72202CVE (CAN) ID: CVE-2014-6589 VirtualBox is a x86 virtualization product. Oracle VM VirtualBox

Wireshark TLS/SSL decryption Denial of Service Vulnerability (CVE-2015-0564) Release date:Updated on: Affected Systems:Wireshark 1.12.0-1.12.2Wireshark 1.10.0-1.10.11Description:Bugtraq id: 71922CVE (CAN) ID: CVE-2015-0564 Wireshark is the most

Linux Kernel 'fs/isofs/rock. c' local information leakage Vulnerability Release date:Updated on: Affected Systems:Linux kernelDescription:Bugtraq id: 71883 Linux Kernel is the Kernel of the Linux operating system. Linux kernel has a local

Baidu Browser Remote Command Execution 5 1. first, open a local page in the Baidu browser, such as file: // C:/xxxxxx. You will find the following error: location in the F12 console. href view, you can see that the URL is changed to: data: text/html,

Huawei USG9560/9520/9580 master Processing Unit (MPU) Memory leakage Denial of Service Vulnerability Release date:Updated on: Affected Systems:Huawei USG9560/9520/9580Description:Bugtraq id: 71788 Huawei USG9560/9520/9580 is a high-end 10 Gb

Openssl ssl23_get_client_hello Function DoS Vulnerability Release date:Updated on: Affected Systems:OpenSSL Project OpenSSL 1.0.1jDescription:CVE (CAN) ID: CVE-2014-3569 OpenSSL is an open-source SSL implementation that implements high-strength

OSSEC insecure temporary File Creation Vulnerability (CVE-2014-5284) Release date:Updated on: Affected Systems:OSSEC: OSSEC 2.8Description:Bugtraq id: 70149CVE (CAN) ID: CVE-2014-5284 OSSEC is an open-source host-based intrusion detection system. In

CTF: ASUS RT-AC66U router Vulnerability Analysis I am very interested in EFF's open wireless routing activity, but they did not display their devices at all. The RT-AC66U in the rules is listed as a device that may be used to attack. I had a

SQL Injection via DNS 0x00 Analysis Whatscat is a php app that can upload pictures of cats and comment on them. Address: Https://blogdata.skullsecurity.org/whatscat.tar.bz2 The vulnerability code exists in the password reset module of login. php,

How to configure a host-based Intrusion Detection System on CentOS? (1) One of the first security measures that any system administrator wants to deploy on its production server is the file tampering detection mechanism. Criminals tamper with not

Password Reset Vulnerability for any user on a ZTE website (typical design defect cases) Password Reset Vulnerability for any user on a ZTE websiteDetailed description: Password Reset Vulnerability for any user on a ZTE websiteProof of vulnerability:

Multiple Security Vulnerabilities of Renren's network partners suspected to be detected in QQ music Some common security problems: weak passwords, sqli, LFI, etc. When listening to songs in QQ music, I found an IP address Check port 80 and find

General vulnerability packaging on an online self-service Platform What I learned today is as follows:1 # Reset Password at will2 # unlimited front-end upload of arbitrary files3 # Arbitrary File Download4 # Some functions are improperly designed,

SQL Injection caused by improper ThinkPHP patch repair This is ThinkPHP patch for this injection: https://github.com/liu21st/thinkphp/commit/23c6e130ce75f2132e5b48699363a75ed28e15b2   }elseif(is_array($val) && isset($_REQUEST[$key]) &&

Wireshark talking about tcp three-way handshakeCapture Data Packets:Open wireshark --> Capture --> interfaces --> select Nic --> startOpen the browser, enter www.xiyou.edu.cn, and close the browser after the web page is opened successfully.Click

SSRF (with verification script) SSRF (with verification script) SSRF is located:  http://tuanbai.baidu.com/apiCheckv1/?url=http://10.42.7.78 HTTP Status 200, will return  Retrieving data from the API does not conform to our specified XML

SQL Injection for a website on Sina Weibo SQL Injection for a website on Sina Weibo Vulnerability url Does the id parameter exist in the injection http://data.weibo.com/report/analystarticle? Id = 2205075871 http://data.weibo.com/report/reportDetail?

Php 5.x.x vulnerabilities (phpyun and new cloud cms shell testify) Php 5. x. x two small bugs are used in actual scenarios. This was not the case, but due to the fact that there are fresh examples during the cms white box review process, let's send