Cloud Security

APP security analysis-taxi hailing Software Recently, I found that the APK of a taxi hailing software is very popular. I heard that they are providing very strict protection to prevent users from packing twice. Today, let's analyze how secure he is.

Linux Kernel KVM Local Denial of Service Vulnerability (CVE-2014-7842) Release date:Updated on: Affected Systems:Linux kernelDescription:Bugtraq id: 71078CVE (CAN) ID: CVE-2014-7842 Linux Kernel is the Kernel of the Linux operating system. Linux

Adobe Flash Player/AIR Information Leak Vulnerability (CVE-2014-8437) Release date:Updated on: Affected Systems:Adobe Flash Player 15.xAdobe Flash Player 14.xAdobe Flash Player 13.xAdobe Flash Player 11.xDescription:Bugtraq id: 71036CVE (CAN) ID:

Linux Kernel 'ttusbdecfe. c' Buffer Overflow Vulnerability Release date:Updated on: Affected Systems:Linux kernelDescription:Bugtraq id: 71097 Linux Kernel is the Kernel of the Linux operating system. Linux kernel has a buffer overflow

GnuTLS Multiple Heap corrupt Denial of Service Vulnerability (CVE-2014-8564) Release date:Updated on: Affected Systems:GnuTLS 3.xDescription:Bugtraq id: 71003CVE (CAN) ID: CVE-2014-8564 GnuTLS is a function library used to implement TLS

Multiple Remote Denial of Service Vulnerabilities in binutils Release date:Updated on: Affected Systems:GNU BinutilsDescription:Bugtraq id: 70991 GNU BinUtils is a binary tool set used to perform lower-level operations. Binutils has multiple

Linux Kernel Local Denial of Service Vulnerability (CVE-2014-7843) Release date:Updated on: Affected Systems:Linux kernelDescription:Bugtraq id: 71082CVE (CAN) ID: CVE-2014-7843 Linux Kernel is the Kernel of the Linux operating system. When

Wireshark NCP parser Remote Denial of Service (CVE-2014-8713) Vulnerability) Release date:Updated on: Affected Systems:Wireshark 1.10.0-1.10.10Description:Bugtraq id: 71073CVE (CAN) ID: CVE-2014-8713 Wireshark is the most popular network protocol

Remote Denial of Service Vulnerability (CVE-2014-6097) for multiple IBM DB2 Products) Release date:Updated on: Affected Systems:IBM DB2 9.xIBM DB2 10.xDescription:Bugtraq id: 70983CVE (CAN) ID: CVE-2014-6097 IBM DB2 is a large commercial

Sap ehs Management SQL Injection Vulnerability (CVE-2014-8664) Release date:Updated on: Affected Systems:Sap ehs ManagementDescription:Bugtraq id: 71025CVE (CAN) ID: CVE-2014-8664 Sap ehs Management is an environment, health, and security

A cms program has SQL injection, causing the Administrator account to fall A cms program has SQL injection, causing the Administrator account to fall Injection file: textcon. asp? Id =Sqlmap usage Demo:C: \ Python27 \ SqlMap> sqlmap. py-u

Session verification for backup data of a general system is lax The session verification of backup data in a general system is lax, and the file name cannot be strictly controlled. getshell =  Backup. php ob_start (); error_reporting (0); include (

Weaver eteams_oa system unauthorized modification of arbitrary user information   Entering https://www.eteams.cn/login/demoThen log on to a common user:  Click the person at the beginning of the page:  Capture the package to get a link:Https://www.

DouPHP SQL Injection DouPHP features are simple, so it is easier to defend against it. Using global filtering can avoid problems, but there are still some less rigorous aspects.It's not easy to dig holes --Detailed description: In the file \ www \

The latest FineCMS storage xss cross-Background getshell and multi-site xss collection First, let's demonstrate the first xss. Through this xss, the background getshell is rebounded: Step 1: register a user. If the Administrator approves the

SQL injection vulnerability in a General Digital Campus System (two parts) New coordinate Digital Campus System Injection Vulnerability Official Website: http://www.wxlibiao.com/home? Uid = 1, 10549Many schools are using the new coordinate Digital

SA permission injection package in a teaching management system #2 (non-repetitive)   This is the "Laboratory Teaching Management System" software address: http://www.wanxinsoft.com/product1_3.asp    The vulnerability file

High-risk SQL injection vulnerability in a general disaster warning system   Injection link:/Plan/FloodPlan/FileEdit. aspx? ReadOnly = & amp; ID = 499 Injection parameter: IDPayload1:/Plan/FloodPlan/FileEdit. aspx? ReadOnly = & ID =-1 '+ and + 1 = @

Mango cloud KODExplorer storage type xss (1) Instead, it is actually downloaded. The default value of the app to your server is writable. Is the default configuration of the downloaded version, and the default configuration is not used in the

Getshell caused by improper FengCMS repair Improper FengCMS repair leads to getshell, which is an improper repair. If a problem is found, and the install directory is not automatically deleted by default, getshell can still be used!   Header