Cloud Security

Oracle VM VirtualBox local vulnerabilities (CVE-2014-6590) Release date:Updated on: Affected Systems:Oracle VM VirtualBox Description:Bugtraq id: 72213CVE (CAN) ID: CVE-2014-6590 VirtualBox is a x86 virtualization product. Oracle VM VirtualBox

WordPress Cart66 Lite plug-in Security Restriction Bypass and SQL Injection Vulnerability Release date:Updated on: Affected Systems:WordPress Cart66 Lite 1.5.3Description:Cart66 Lite plug-in WordPress's e-shopping cart plug-in. WordPress Cart66

Android browser cross-Origin data theft and Intent Scheme attacks The vulnerability we will introduce next affects self-built browsers and some other specific Android browsers in Android versions earlier than 4.4. It allows hackers to read cookie

IBM WebSphere DataPower XC10 Security Restriction Bypass Vulnerability Release date:Updated on: Affected Systems:IBM WebSphere DataPower XC10 2.5IBM WebSphere DataPower XC10 2.1Description:CVE (CAN) ID: CVE-2014-6138 XC10 is a combination of the

Multiple WordPress Themes 'admin-ajax. php' Arbitrary File Download Vulnerability Release date:Updated on: 2014-09-03 Affected Systems:WordPressDescription:--------------------------------------------------------------------------------Bugtraq id:

Apache Cordova For Android Security Restriction Bypass Vulnerability (CVE-2014-3501) Release date:Updated on: Affected Systems:Apache Group Cordova Description:--------------------------------------------------------------------------------Bugtraq

Gartner, an authoritative Research Institute, recently pointed out that installing Windows on Mac computers will not bring viruses to Mac systems.According to Reuters, Gartner Vice President of Research Michael Silver said IT administrators do not

Recently, researchers from an information security company found that a vulnerability in Apple's iPhone software could allow mobile phones to be remotely controlled. The vulnerability occurs in the mobile phone's Safari web browser, which is also

Release date:Updated on: Affected Systems:Cisco Telepresence Recording Server 1.6.1Cisco Telepresence Recording Server 1.6Cisco CTMS: Cisco CTMS 1.6Cisco CTMS: Cisco CTMS 1.5Cisco CTMS: Cisco CTMS 1.1Cisco CTMS: Cisco CTMS 1.0Unaffected

Release date: 2011-12-14Updated on: 2011-12-14 Affected Systems:Adobe Shockwave Player 11.xUnaffected system:Adobe Shockwave Player 11.6.0.626Description:--------------------------------------------------------------------------------Bugtraq id: 4830

Release date:Updated on: Affected Systems:IBM Rational AppScan 8.xIBM Rational AppScan 7.xDescription:--------------------------------------------------------------------------------Cve id: CVE-2011-3389, CVE-2011-3516, CVE-2011-3521, CVE-2011-3544,

Release date:Updated on: Affected Systems:Netiq Privileged User ManagerDescription:--------------------------------------------------------------------------------Bugtraq id: 56535 NetIQ Privileged User Manager is a solution for secure access to

Release date:Updated on: 2012-11-19 Affected Systems:VMWare ESXi 4.xDescription:--------------------------------------------------------------------------------Bugtraq id: 56571Cve id: CVE-2012-5703 VMware ESX Server is an enterprise-level virtual

Frequent RFID attacks     In recent years, there have been frequent RFID attacks at home and abroad. Some hackers have used RFID technology to crack various consumer cards, recharge cards, and then maliciously recharged consumer cards. Some of them

Secrets: malware toolbox for poser In the last two years, PoS malware has been widely used due to PoS attacks against Tajikistan, jard.com, and Kmart. With the arrival of the "Black Friday" shopping season, malicious software on the POS machine will

Cross-Site Request Forgery (CSRF) is caused by Multiple Functional design defects in the whole site of the site. The private message function can be used to affect more than 300 users) Cross-Site Request Forgery (CSRF) is caused by Multiple

Vulnerability Analysis: a persistent XSS vulnerability in the Markdown parser What is Markdown? Markdown is a lightweight markup language. The popularity of Markdown has been widely supported by GitHub and Stack Overflow. as an ordinary person, we

KPPW latest SQL injection vulnerability 8 (global problems cause 12 injection and unauthorized operations) KPPW Latest Version SQL injection vulnerability 8. Identify the culprit from one problem. Global File problems cause 12 injection and

Re-Reset any email password in moji weather by bypassing the patch 0x0 environment Introduction After many feedback and communication on moji weather, moji O & M greatly reported that the developer finally fixed WooYun: moji weather android client

Java Web application configuration file security solutionThis article mainly describes the security of configuration files for Java Web applications. Generally, Java Web applications have more or less configuration files. The configuration of data