Cloud Security

BitTorrent remote code execution vulnerability in CVE-2014-8515) Release date:Updated on: Affected Systems:BitTorrentDescription:Bugtraq id: 71630CVE (CAN) ID: CVE-2014-8515 BitTorent is a content delivery protocol that uses an efficient software

MantisBT multiple URI Redirection Vulnerability (CVE-2014-6316) Release date: 2014-3 3Updated on: Affected Systems:Mantisbt Description:Bugtraq id: 71478CVE (CAN) ID: CVE-2014-6316 MantisBT is a Web-based bug Tracking System. When MantisBT

FFmpeg 'libavcodec/pngdec. c' cross-border Denial of Service Vulnerability Release date:Updated on: Affected Systems:FFmpeg 2.xDescription:Bugtraq id: 71619CVE (CAN) ID: CVE-2014-9317 FFmpeg is a free software that allows you to perform video,

Android Hacking Part 10: insecure Local Storage Let's take a look at other security issues related to local storage in Android. File Download: SQLite Database SQLite is a file-based lightweight database. ". Db" and ". sqlite" are usually used as the

Baidu Browser Remote Command Execution 3 and Solution When the browser is updated, it is updated to the latest version (6.5.0.50449). After reading this article, a certain API has made some restrictions, but after studying it, I found that the

UXSS of ZTE micron browser and Solutions The latest version is tested. Download micron browser address: http://www.umeweb.cn/Micron browser is developed in cooperation with ZTE.  Uxss (Universal Cross-Site Scripting general-purpose XSS) UXSS is

Baidu Browser Remote Command Execution   1. According to the general test idea, first we find the privileged domain, including bdbrowser: //, http://xapp.baidu.com.2. then we need to find the available XSS under these two privileged domains, and

The impact of new X. Org security vulnerabilities is traced back to the Code in 1987. The X. Org Project published a Security Bulletin, saying that the IOActive security researcher Ilja van Sprundel found a series of security vulnerabilities. He

Detailed analysis of Windows vulnerability in MS14-066/CVE-2014-6321 Winshock About MS14-066/CVE-2014-6321, that is, winshock vulnerability has been popular for a long time. Due to its wide impact, no poc announcement has been made so far.

SAP NetWeaver Denial of Service Vulnerability (CVE-2014-8591) Release date:Updated on: Affected Systems:Sap net Weaver 7.3Sap net Weaver 7.02Description:Bugtraq id: 71030CVE (CAN) ID: CVE-2014-8591 SAP NetWeaver is the integrated technology

Unauthorized logon to Ruyi cloud router Management page can be cracked, dns phishing can be modified, and root and repair solutions of the vroroot can be controlled. The current vro is intelligent and interactive, but once poorly managed, it is easy

74cms (20141112) Unauthorized Access Unauthorized access to others' resumes This vulnerability was later thought of as high-risk. Why?You can send the resume (resume_id) of any account to any job (job_id) published by any company, causing

Alibaba Cloud cooperates with CRM, Alibaba Cloud cooperates with OA, and Alibaba Cloud cooperates with CRM to provide general SQL injection. Several demos on the official website are all reproduced. Official Website:Http://www.wecrm.com/Chengdu Ren

21 vianet substation SQL Injection Vulnerability Injection point: http://dhs.21vianet.com/dhs/site0.php? ID = 55User rootWeb path leakage caused by improper website ConfigurationObtain the web path. Set0.php   /Etc/passwdRoot: x: 0: 0:

Download arbitrary files from Shanghai mall through webshell Arbitrary File downloads, database leakage, and webshell Retrieval  Www.shanghaicentre.com/download.php? File = download. php  You can download any file without filtering the file

DFCMS system universal injection (demo demonstration)   Program: DFCMSVulnerability file: acAdmin/acAdminLogin. jspAccountNumber = the parameter is not filtered. (That is, the corresponding part of the number)Post: isEncrypt = 0 & loginFailPage =

The phpwind win server can be downloaded to the backup file (mainly to mention the solution) Ah ...... If you don't talk about anything else, you can understand that you only need to crack a few numbers. I 'd like to mention the repair solution.   

[CVE-2014-8959] phpmyadmin Arbitrary File Inclusion Vulnerability Analysis 0x01 vulnerability description Phpmyadmin is a mysql database management software that is widely used and developed based on PHP. The latest CVE-2014-8959 announcement

XSS attacks when setting cookies We all know that many XSS attacks aim to obtain users' cookie information. The most common method is to transmit cookies to other servers by setting src in js. So how can we prevent js from getting cookies? Here is

One SQL injection vulnerability in the Domain Name System of us orange An IDC domain name system SQL injection vulnerability with a time type  POST/ajax/domregister. ashx HTTP/1.1Content-Length: 251Content-Type: