Cloud Security

MySQL MyISAM insecure temporary File Creation Vulnerability Release date:Updated on: Affected Systems:Mysql MyISAMDescription:Bugtraq id: 69732CVE (CAN) ID: CVE-2014-4274 MySQL MyISAM is the default storage engine for MySQL relational data

Linux Kernel 'netdevice. H' Denial of Service Vulnerability (CVE-2014-3535) Release date:Updated on: Affected Systems:Linux kernelDescription:Bugtraq id: 69721CVE (CAN) ID: CVE-2014-3535 Linux Kernel is the Kernel of the Linux operating system.

D-Bus Denial of Service (CVE-2014-3638) Release date:Updated on: Affected Systems:D-Bus 1.8.xDescription:Bugtraq id: 69833CVE (CAN) ID: CVE-2014-3638 D-Bus is an asynchronous inter-process communication system. It is mainly used for system

PowerDNS Recursor malformed packet Sequence Denial of Service Vulnerability Release date:Updated on: Affected Systems:PowerDNS Recursor 3.6.0Description:CVE (CAN) ID: CVE-2014-3614 PowerDNS Recursive Server is a high-end name resolution Server.

Apt Security Restriction Bypass Vulnerability (CVE-2014-0488) Release date:Updated on: Affected Systems:Ubuntu aptDescription:Bugtraq id: 69838CVE (CAN) ID: CVE-2014-0488 The apt package is the advanced frontend of dpkg. When APT has never been

Oracle MySQL Client yaSSL certificate Decoding Buffer Overflow Vulnerability Release date:Updated on: Affected Systems:Oracle MySQLUnaffected system:Oracle MySQL 5.6.20Oracle MySQL 5.5.39Description:Bugtraq id: 69743 MySQL is an open-source

Conga luci Security Restriction Bypass Vulnerability (CVE-2014-3521) Release date:Updated on: Affected Systems:Sourceware congaDescription:Bugtraq id: 69820CVE (CAN) ID: CVE-2014-3521 Conga is a remote workstation management system and luci is

Junos Pulse Secure Access Service click hijacking Vulnerability (CVE-2014-3823) Release date:Updated on: Affected Systems:Juniper Networks Junos Pulse Secure Access ServiceDescription:Bugtraq id: 69800CVE (CAN) ID: CVE-2014-3823 Junos Pulse

Wordpress WP Support Plus Responsive Ticket System Multiple Vulnerabilities Release date:Updated on: Affected Systems:WordPress WP Support Plus Responsive Ticket System 2.0Description:Bugtraq id: 69736CVE (CAN) ID: CVE-2014-3620 WP Support Plus

MantisBT Null Byte poisoning LDAP Authentication Bypass Vulnerability Release date:Updated on: Affected Systems:Mantisbt Description:Bugtraq id: 69780CVE (CAN) ID: CVE-2014-3077 MantisBT is a Web-based bug Tracking System. MantisBT 1.2.17 and

Open-Xchange AppSuite XSS Vulnerability (CVE-2014-5237) Release date:Updated on: Affected Systems:Open-xchange OX App Suite Description:Bugtraq id: 69794CVE (CAN) ID: CVE-2014-5237 Open-Xchange Server is a part of Open-source projects that mainly

Linux Kernel "assoc_array_gc ()" null pointer indirect reference vulnerability Release date:Updated on: Affected Systems:Linux kernel 3.16.2-3.14.18Description:CVE (CAN) ID: CVE-2014-3631 Linux Kernel is the Kernel of the Linux operating system.

Safari 7.0.4 may cause most XSS defense mechanisms to be bypassed (conditional) After many times, I feel that there is no room for further improvement.There is also a safari8, first submit this to see the depthFor XSS defense of URL context, many

78OA Office System Vulnerability Gift Packs (reflected storage xss and SQL injection) 78OA Office System Vulnerability Gift Packs (reflection, storage xss, SQL)First, download the latest version from the official

A Game On Bian Feng can execute arbitrary commands due to a vulnerability. Bian Feng recently used the signshop plug-in my world version 1.6.4. This plug-in has any command execution vulnerability, so you can directly execute "op player name" to

Install Apache2 + ModSecurity and customize WAF rules on ubuntuAlthough VPS uses the cloud WAF function, it is still a little worried. For double insurance, we decided to use modsecurity to customize rules, the following describes how to configure

ECShop arbitrary User Password blind Change Vulnerability ECShop password retrieval function design defect, changing the password link is not time-effective You can use the search engine to search for keywords to reset the passwords of some users on

FreeCms kills SQL Injection Vulnerability Recently, the company's javaee business only mentioned pistol PR.Order injection is not only one of them, but also similar injection points in order, for example, CommentAction. Here we only write one. Both

DedeCMS-V5.7-UTF8-SP1 csrf getshell no member center required Recently, csrf went viral again, and various csrf pants were removed. The dede background is easy to write getshell directly.I 've been trying the black box in the white box and found

Ecshop Latest Version stores XSS to the background The stored XSS is directly stored in the background. It is easier for e-commerce websitesThe problem occurs on the user recharge page. If the payment is not successful, the method act = check is