Cloud Security

Linux Kernel local information leakage Vulnerability (CVE-2014-9731)Linux Kernel local information leakage Vulnerability (CVE-2014-9731) Release date:Updated on:Affected Systems: Linux kernel Description: Bugtraq id: 75001CVE (CAN) ID: CVE-2014

Xen Denial of Service Vulnerability (CVE-2015-4103)Xen Denial of Service Vulnerability (CVE-2015-4103) Release date:Updated on:Affected Systems: XenSource Xen 3.3.x-4.5.x Description: CVE (CAN) ID: CVE-2015-4103Xen is an open-source Virtual

Cisco Unified MeetingPlace Information Leakage Vulnerability (CVE-2015-0763)Cisco Unified MeetingPlace Information Leakage Vulnerability (CVE-2015-0763) Release date:Updated on:Affected Systems: Cisco uniied MeetingPlace 8.6 (1.2) Description:

GNU Parallel Arbitrary File Write Vulnerability in CVE-2015-4156)GNU Parallel Arbitrary File Write Vulnerability in CVE-2015-4156) Release date:Updated on:Affected Systems: GNU Parallel Description: CVE (CAN) ID: CVE-2015-4156GNU parallel is

Apache Camel Vulnerability (CVE-2015-0264)Apache Camel Vulnerability (CVE-2015-0264) Release date:Updated on:Affected Systems: Apache Group Camel Apache Group Camel Description: CVE (CAN) ID: CVE-2015-0264Apache Camel is an open-source

CURL/libcURL out-of-bounds read Denial of Service Vulnerability (CVE-2015-3145)CURL/libcURL out-of-bounds read Denial of Service Vulnerability (CVE-2015-3145) Release date:Updated on:Affected Systems: CURL 7.37.0-7.41.0 Description: Bugtraq id:

Xen Information Leakage Vulnerability (CVE-2015-3340)Xen Information Leakage Vulnerability (CVE-2015-3340) Release date:Updated on:Affected Systems: XenSource Xen 4.2.x-4.5.x Description: Bugtraq id: 74248CVE (CAN) ID: CVE-2015-3340Xen is an

Teach you how to stick to the Black Pages of hacked statistics-uncover a hacker's tricks   I saw the black rice and the black rice went out and forced it to work again ~ No way, you can only let go of your work. Get out for counterfeiting I have

Centos system initialization script#! /Bin/bash # author: honway. liu # mail: gm100861@gmail.com # blog: http://linuxsogood.org# Date: 2013-06-25if [$ (id-u )! = 0]; thenecho "Must be root can do this. "exit 9fi # set privilegeschmod

Rednet Forum horizontal Privilege Escalation Vulnerability The rednet Forum has a horizontal Privilege Escalation Vulnerability. You can view others' personal data at will. When the password is changed, the new password is displayed in plaintext on

How can I win all the business of qingting fm? How can I win all the business of qingting fm? 1. Find the substation. The following second-level domain names are foundHttp://star.cms.qingting.fm/phpcms get shell through getshell at the front end2.

SQL Injection Mining A few days ago, I saw such a question in the member question area of the red/Black Alliance: "Who Are You Still injecting, it is found that many websites cannot be effectively injected when testing with tools. Some websites

Youku client can be attacked by man-in-the-middle to execute code (use conditions are harsh) Youku client can be attacked by man-in-the-middle to execute code, which requires strict prerequisites. Version: 5.3.1.2122. In fact, the prerequisite is

Security Vulnerabilities enter a large number of internal systems of Soufun (you can modify the online official website, APP content, and business impact) Go to Soufun's internal system (you can modify the content on the official website) First,

Summary: how hackers intrude into websitesToday, hackers are rampant. Do you know how hackers intrude your website? I did a simple investigation just now. Many websites have been infiltrated, and some webmasters know how hackers intrude into the

Stored XSS in an application store An application mall has various stored XSS pop-up window cookies Http://www.appstar.com.cn/APP star-mobile app development platform without coding-mobile app development platform-Android, IOS app

Defense Against database hit attacksHazards of credential stuffing According to the current test experience, credential stuffing is still a very common vulnerability type for Internet enterprises in China.Basic defense strategies In fact, there

How to intrude into server sites by using the bypass 1. Overview By-site injection is a common means of penetration intrusion. Generally, a server has many sites. These sites are independent of each other and use different domain names (even ports ),

[Security] (5): shellcode code18:08:45 In the previous section, we introduced the compilation of basic shellcode, using three system calls: exit (), setreuid (), and execve, in practice, You must select the appropriate system call based on your

Lenovo's important Substation POST Injection Vulnerability Lenovo's important Substation POST Injection Vulnerability Sqlmap-u "http://yun.lenovo.com/join.php" -- data = "keywords =-1 & search ="-p keywords -- dbsKeyword injection exists.Web