Cloud Security

PHP Buffer Overflow Vulnerability (CVE-2015-3329)PHP Buffer Overflow Vulnerability (CVE-2015-3329) Release date:Updated on:Affected Systems: PHP Description: Bugtraq id: 74240CVE (CAN) ID: CVE-2015-3329PHP is a widely used scripting

GNU glibc Multiple Buffer Overflow Vulnerability (CVE-2015-1781)GNU glibc Multiple Buffer Overflow Vulnerability (CVE-2015-1781) Release date:Updated on:Affected Systems: GNU glibc Description: Bugtraq id: 74255CVE (CAN) ID: CVE-2015-1781Glibc

PHP 'sapi/apache2handler/sapi_apache2.c 'Remote Code Execution VulnerabilityPHP 'sapi/apache2handler/sapi_apache2.c 'Remote Code Execution Vulnerability Release date:Updated on:Affected Systems: PHP PHP Description: Bugtraq id: 74204CVE (CAN)

IBM WebSphere Application Server Privilege Escalation Vulnerability (CVE-2015-1882)IBM WebSphere Application Server Privilege Escalation Vulnerability (CVE-2015-1882) Release date:Updated on:Affected Systems: IBM Websphere Application Server

Hijacking of home and office routers to launch DDoS attacks According to a new report released by Incapsula, a network security expert, they have discovered that a DDoS botnet hijacked thousands of routers and launched the first wave of HTTP

WebKit Memory Corruption Vulnerability (CVE-2015-1152)WebKit Memory Corruption Vulnerability (CVE-2015-1152) Release date:Updated on:Affected Systems: Apple Safari Apple Safari Apple Safari Description: Bugtraq id: 74525CVE (CAN) ID: CVE-2015-

SQLite 'src/where. c' Memory Corruption VulnerabilitySQLite 'src/where. c' Memory Corruption Vulnerability Release date:Updated on:Affected Systems: SQLite Description: Bugtraq id: 74313SQLite is an embedded database.SQLite has the remote

IBM DB2/DB2 Connect information leakage (CVE-2014-0919)IBM DB2/DB2 Connect information leakage (CVE-2014-0919) Release date:Updated on:Affected Systems: IBM DB2 Connect 9.xIBM DB2 Connect 10.xIBM DB2 9.xIBM DB2 10.x Description: CVE (CAN) ID:

Pillow plugin 2kimageplugin plug-in Denial of Service Vulnerability (CVE-2014-3598)Pillow plugin 2kimageplugin plug-in Denial of Service Vulnerability (CVE-2014-3598) Release date:Updated on:Affected Systems: Python Software Foundation Pillow

WordPress WP Photo Album Plus Cross-Site Scripting VulnerabilityWordPress WP Photo Album Plus Cross-Site Scripting Vulnerability Release date:Updated on:Affected Systems: WordPress WP Photo Album Plus Description: WP Photo Album Plus is a

Unauthorized access to an Order System in Shanghai zhilongUnauthorized access to an Order System in Shanghai zhilong Release date:Updated on:Affected Systems: Wiselong Description: Shanghai zhilong Enterprise Management Co., Ltd. (Wiselong) is

Cisco UCS Central Software Arbitrary Command Execution Vulnerability (CVE-2015-0701)Cisco UCS Central Software Arbitrary Command Execution Vulnerability (CVE-2015-0701) Release date:Updated on:Affected Systems: Cisco UCS Central Software

How to build a server monitoring system using Monit? (1) Many Linux administrators rely on a centralized remote monitoring system (such as Nagios or Cacti) to check the health of the network infrastructure. Although the centralized monitoring

Analyze a js backdoor of WordPress We recently found a backdoor for collecting Administrator Logon creden on many WordPress sites. The victim website is inserted with hidden code. When the Administrator logs on, the code is triggered, the

Injection learning records in MCIR Environment: xampp-win32-5.6.3-0-VC11 mcirPreface Mcir is also one of the top ten, but how does one feel that no one has written such information about it? This is really hard for a newbie to learn this system, and

Wordpress Comment feature at the beginning and end of Xss Recently, Wordpress's program commented on the feature of Xss on Weibo, and the repair process is also a wave of twists and turns. Next, let me tell you one by one.WordPressThis problem is

An API defect of Youku leads to credential stuffing to obtain VIP accounts (proving that a large number of VIP users can be obtained) A library hit query VIP caused by an API defect in Youku Step 1:Use android-based Youku to log on and capture

SQL Injection exists in an important system of GreenTree Inn A certain important system in GreenTree Inn has 14 databases involved in SQL injection. Problem: POST /op/Module_ERP/UserActive.aspx?userid=1997* HTTP/1.1Host:

A system of yuantong has sensitive information leakage and unauthorized access (case studies) A system of yuantong has sensitive information leakage and unauthorized access (case studies) Http://hr.f5.yto56.com.cn/hrss/ELTextFile.load.d? Src

DNSPod domain names do not have all the authentication permissions (this can cause the domain name to be maliciously taken over for use) and Solutions Because DNSPOD does not have all the permissions to verify the domain name when adding a domain