Cloud Security

Huawei USG9560/9520/9580 master Processing Unit (MPU) Memory leakage Denial of Service Vulnerability Release date:Updated on: Affected Systems:Huawei USG9560/9520/9580Description:Bugtraq id: 71788 Huawei USG9560/9520/9580 is a high-end 10 Gb

Remote Denial of Service Vulnerability (CVE-2014-8901) for multiple IBM DB2 Products) Release date:Updated on: Affected Systems:IBM DB2 IBM DB2 9.8-FP5IBM DB2 9.7-FP10IBM DB2 9.5-FP10IBM DB2 10.1-FP4Description:Bugtraq id: 71734CVE (CAN) ID: CVE-20

Libvirt 'qemu/qemu_driver.c' DoS Vulnerability Release date:Updated on: Affected Systems:LibvirtDescription:Bugtraq id: 71782CVE (CAN) ID: CVE-2014-8136 The Libvirt library is a Linux API for implementing Linux virtualization. It supports various

Libvirt 'qemuconnectgetalldomainstats () 'Function Denial of Service Vulnerability Release date:Updated on: Affected Systems:LibvirtDescription:Bugtraq id: 71780CVE (CAN) ID: CVE-2014-8131 The Libvirt library is a Linux API for implementing Linux

Libvirt 'storagevolupload () 'Function Denial of Service Vulnerability Release date:Updated on: Affected Systems:LibvirtDescription:Bugtraq id: 71781CVE (CAN) ID: CVE-2014-8135 The Libvirt library is a Linux API for implementing Linux

HWiNFO32 driver arbitrary address write fixed data HWiNFO32 driver is not strictly filtered, resulting in the arbitrary address write fixed Data Vulnerability. The driver genie contains HWiNFO32 named Mydriver32.sys. In the DeviceIoControl routine,

X. Org X Server protocol to handle Multiple Integer Overflow Vulnerabilities Release date:Updated on: Affected Systems:X.org X11Description:Bugtraq id: 71595CVE (CAN) ID: CVE-2014-8092 X. Org Server is the official reference implementation of X

ICANN was attacked by hackers, and employee account information was leaked. On July 22, December 18, Beijing time, ICANN, the Internet domain name management agency, said in a bulletin on Wednesday that unidentified attackers have cracked the

GParted OS Command Execution Vulnerability Release date:Updated on: Affected Systems:GParted Unaffected system:GParted> = 0.15.0Description:CVE (CAN) ID: CVE-2014-7208 GParted is a graphic disk partition management editor. Gparted *>

Apple Safari cross-origin Vulnerability (CVE-2014-4465) Release date: 2014-3 3Updated on: Affected Systems:Apple Safari Apple Safari Description:Bugtraq id: 71439CVE (CAN) ID: CVE-2014-4465 IOS is an operating system developed by Apple for mobile

Python TLS Certificate verification Security Restriction Bypass Vulnerability (CVE-2014-9365) Release date:Updated on: Affected Systems:PythonDescription:Bugtraq id: 71639CVE (CAN) ID: CVE-2014-9365 Python is an object-oriented, literal

Trihedral VTScada Integer Overflow Vulnerability Release date:Updated on: Affected Systems:Trihedral VTScada Trihedral VTScada Trihedral VTScada 6.5-9.1.20Description:CVE (CAN) ID: CVE-2014-9192 VTScada is a Windows-based SCADA System with Web

Apache Subversion mod_dav_svn DoS Vulnerability (CVE-2014-8108) Release date:Updated on: Affected Systems:Apache Group Subversion 1.xDescription:Bugtraq id: 71725CVE (CAN) ID: CVE-2014-8108 Subversion is an open-source multi-user version control

Apache HTTP Server 'mod _ proxy_fcgi 'DoS Vulnerability Release date: 2014-10-07Updated on: Affected Systems:Apache Group HTTP Server 2.4.10Description:Bugtraq id: 71657CVE (CAN) ID: CVE-2014-3583 Apache HTTP Server is an open-source Web Server of

Linux server with sniffing Password Objective: www.xxx.com   0x01 main site step Currently, the main site dedecms does not have one available 0-day release, and the background is not the default one. google hack is fruitless.   0x02 peer

Usage of. git/config file Leakage This vulnerability is similar to svn leakage. You can also restore the entire project process based on the configuration file. According to the vulnerability prompt, found the exploitation tool: rip-git.pl Based on

Mongodb Unauthorized Access Vulnerability Detection report for the entire network[+] Author: f1, 2, 4 [+] Team: FF0000 TEAM [+] From: HackerSoul [+] Create: 2014-12-10IntroductionDomain listProof of ConceptScan resultsIP locationedevil

SoakSoak malware tracing Research Report   On June 23, December 14, 2014, a foreign Sucuri security blog reported that a large number of WordPress sites were affected by SoakSoak malware. It is reported that the malware will infect the WordPress

Without restrictions on getshell for uploading system files Vulnerability files /Lm/sys/opr_uploadimg.jspCode that causes the Vulnerability  If (action. equals ("upload") {// construct the upload class, and pass in the upload path CommonUploadFile

Ucserver injection when the key is known The vulnerability was accidentally discovered because it helped finger solve the problem.Ask finger how to get the key. There is a piece of code in/uc_server/control/feed. php:  function onadd() {$this->load('