Cloud Security

Adobe Flash Player type Obfuscation Vulnerability (CVE-2015-7648)Adobe Flash Player type Obfuscation Vulnerability (CVE-2015-7648) Release date:Updated on:Affected Systems: Adobe Flash Player Adobe Flash Player Adobe Flash Player 19.x-19.0.0.226

Linux kernel Denial of Service Vulnerability (CVE-2015-6937)Linux kernel Denial of Service Vulnerability (CVE-2015-6937) Release date:Updated on:Affected Systems: Linux kernel 〈 4.2.3 Description: CVE (CAN) ID: CVE-2015-6937Linux Kernel is the

LibreSSL Buffer Overflow Vulnerability (CVE-2015-5334)LibreSSL Buffer Overflow Vulnerability (CVE-2015-5334) Release date:Updated on:Affected Systems: LibreSSL 2.0.0-2.3.0 Description: CVE (CAN) ID: CVE-2015-5334LibreSSL is a branch of the

Linux kernel Denial of Service Vulnerability (CVE-2015-5283)Linux kernel Denial of Service Vulnerability (CVE-2015-5283) Release date:Updated on:Affected Systems: Linux kernel 〈 4.2.3 Description: CVE (CAN) ID: CVE-2015-5283Linux Kernel is the

Apple iWork Memory Corruption Vulnerability (CVE-2015-7034)Apple iWork Memory Corruption Vulnerability (CVE-2015-7034) Release date:Updated on:Affected Systems: Apple iWork Description: CVE (CAN) ID: CVE-2015-7034Apple iWork is an office

Oracle Agile PLM component Remote Security Vulnerability (CVE-2015-4917)Oracle Agile PLM component Remote Security Vulnerability (CVE-2015-4917) Release date:Updated on:Affected Systems: Oracle Agile PLM 9.3.4 Description: CVE (CAN) ID: CVE-201

389 Directory Server nsSSL3Ciphers preference Vulnerability (CVE-2015-3230)389 Directory Server nsSSL3Ciphers preference Vulnerability (CVE-2015-3230) Release date:Updated on:Affected Systems: 389 Directory Server 389 Directory Server

Joomla exposed SQL injection vulnerability affecting millions of websites Joomla released a patch to fix an SQL injection vulnerability discovered by security researchers. This vulnerability allows malicious users to extract the browser cookies

Cisco ACS Solution Engine XSS Vulnerability (CVE-2015-6349)Cisco ACS Solution Engine XSS Vulnerability (CVE-2015-6349) Release date:Updated on:Affected Systems: Cisco Access Control Server 5.7 (0.15) Description: CVE (CAN) ID:

Apache Ambari (CVE-2015-5210)Apache Ambari (CVE-2015-5210) Release date:Updated on:Affected Systems: Apache Group Ambari Description: CVE (CAN) ID: CVE-2015-5210Apache Ambari is a tool that defines, manages, and monitors Apache Hadoop

HP ArcSight Elevation of Privilege Vulnerability (CVE-2015-6030)HP ArcSight Elevation of Privilege Vulnerability (CVE-2015-6030) Release date:Updated on:Affected Systems: HP ArcSight Logger 6.0.0.7307.1 Description: CVE (CAN) ID:

Xen fixed a high-risk Elevation of Privilege Vulnerability with a history of seven years. The Xen project fixed a high-risk Elevation of Privilege Vulnerability with a history of seven years. This vulnerability allows the malicious

MediaWiki unauthorized operation Vulnerability (CVE-2015-8004)MediaWiki unauthorized operation Vulnerability (CVE-2015-8004) Release date:Updated on:Affected Systems: MediaWiki MediaWiki 1.25.x-1.25.3MediaWiki 1.24.x-1.24.4 Description: CVE

Google Picasa Heap Buffer Overflow Vulnerability (CVE-2015-8096)Google Picasa Heap Buffer Overflow Vulnerability (CVE-2015-8096) Release date:Updated on:Affected Systems: Google Picasa 3.9.140 Build 248Google Picasa 3.9.140 Build 239 Description:

Joomla! Com_contenthistory component information leakage Vulnerability (CVE-2015-7859)Joomla! Com_contenthistory component information leakage Vulnerability (CVE-2015-7859) Release date:Updated on:Affected Systems: Joomla! Joomla! 3.2-3.4.5

Google Chrome same-Source Policy Bypass Vulnerability (CVE-2015-1302)Google Chrome same-Source Policy Bypass Vulnerability (CVE-2015-1302) Release date:Updated on:Affected Systems: Google Chrome Description: CVE (CAN) ID: CVE-2015-1302Google

Specific Code Implementation of shell with basic functions I have been interacting with shell for the last few months, and I feel shell is full of mystery. I accidentally saw an article explaining the implementation of shell, and it was not very

XSS rollback Test Although the same-origin policy limits Js access to dom of non-same-origin sites However, we can still use window. name to transmit cookies across domains. In this way, a reflected XSS is encapsulated as a storage XSS. This example

Injection Point judgment and PredictionI. Judgment and Prediction of injection points 1. Add single quotation marks to submit. Result: if an error message is displayed, the website may have an injection vulnerability. 2. number type to determine

Mysql blind note tips A new method for improving the efficiency of guessing in MySQL blind injection.This method is better than the binary method and bitwise method,Query request example:AND (SELECT @ a: = MID (BIN (FIND_IN_SET (MID (table_name, 1,