Cloud Security

Apache HTTP Server 'Protocol. c' Remote Denial of Service VulnerabilityApache HTTP Server 'Protocol. c' Remote Denial of Service Vulnerability Release date:Updated on:Affected Systems: Apache Group HTTP Server 2.4.12Apache Group HTTP Server

Das_watchdog 'xauthority 'Environment Variable Processing Buffer Overflow VulnerabilityDas_watchdog 'xauthority 'Environment Variable Processing Buffer Overflow Vulnerability Release date:Updated on:Affected Systems: Debian das-watchdog 0.9.0-2

Apple Safari information leakage (CVE-2015-1112)Apple Safari information leakage (CVE-2015-1112) Release date:Updated on:Affected Systems: Apple Safari Apple Safari Apple Safari Description: Bugtraq id: 73974CVE (CAN) ID: CVE-2015-1112Safari

Cisco CUCDM web SQL Injection Vulnerability (CVE-2015-0684) Release date:Updated on: Affected Systems:Cisco uniied Communications Domain Manager 8.1 (4)Cisco uniied Communications Domain ManagerDescription:CVE (CAN) ID: CVE-2015-0684 Cisco uniied

WordPress Daily Edition Theme Full path information leakage Vulnerability Release date:Updated on: Affected Systems:WordPress Daily Edition 1.6.7WordPress Daily EditionDescription:Bugtraq id: 73059 WordPress is a Blog engine developed using PHP

Cisco Unity Connection SIP relay Integrated Port UDP 5060 DoS Vulnerability Release date:Updated on: Affected Systems:Cisco Unity ConnectionDescription:CVE (CAN) ID: CVE-2015-0612 Cisco Unity Connection is a fully functional voice messaging

Tor Denial of Service Vulnerability (CVE-2015-2929)Tor Denial of Service Vulnerability (CVE-2015-2929) Release date:Updated on:Affected Systems: Tor Description: CVE (CAN) ID: CVE-2015-2929Tor is an implementation of the second generation of

Thread Safety)PHP itself does not support threads, but it involves a thread security issue during installation. In Windows, two installation packages are provided, the-enable-maintainer-zts option is provided for compiling and installation in Linux.

Multiple Arbitrary life-saving execution vulnerabilities in the TerraMaster NAS Network Storage Server The TerraMaster NAS network storage server has multiple arbitrary command execution vulnerabilities. Inspired by YY-2012 WooYun-2015-95059, I made

How to use Linux bots to penetrate a small Intranet The shell method in the case is relatively simple. We only focus on the limited space, starting from obtaining permissions.Install BackdoorAfter entering the system, my RP was so lucky that it

Enable Nginx tls sni to support multiple SSL certificates under the same IP address A few days ago, I told my blog to deploy an SSL certificate to improve the performance. Later, I applied for an additional SSL Certificate for my project and

Docker malware Analysis Series IV: javascript anti-obfuscation Analysis  0x00 Introduction This chapter mainly introduces the Javascript anti-obfuscation technology, which is very important for analyzing webpage Trojans, exploiting client

A linux system poisoning record On the company's linux server, we found that the cpu load was too high. Use top to see the abnormal process: ijcfwyjoqkThe parent process is init run: ps-l 10854 display cmd column as uptime run: whereis ijcfwyjoqk

Attackers can bypass WAF brute-force attacks to crack users. Hexun provides interfaces for Traversing users. However, WAF blocked the user password during brute-force cracking, finally bypassing WAF and successfully cracked the attack. The webmail

WordPress slide plug-in RevSlider vulnerability Exploitation Arbitrary read: /Wp-admin/admin-ajax.php? Action = revslider_show_image & img = ../wp-config.php Arbitrary upload: #!/usr/bin/perl## Title: Slider Revolution/Showbiz Pro shell upload

Support union for MYSQL injection on a bus station Website: doubi.tgbus.com parameter arcid   GET /api/index.do?single=doubi&callback=jQuery18300961274579167366_1425390140965&method=tgbus.doubi.login.init&arcid=28034&_=1425390145552

Sina Weibo IPAD client XSS (file domain) + Worm Construction This XSS is triggered in the local region (file: //), which is more interesting. When we share information to Weibo through a third-party APP "kuaishou", the information content will

Logic vulnerabilities and solutions in yueda 001x background Today, I updated the Android APP of yueda mobile APP. I only scanned the interface before, so I will register it with my mobile phone this time ~ The four-digit verification code was found

Code auditing solution of fortune Security Address: http://yuebaomei.com/ For example First of all, if you are a male compatriot, select male.Then ask why you have a man. Yes, sir.Now you have to enter the answer, so that you can find it in the book,

Attackers can exploit some design defects of Renren to attack internal network applications. Attackers can exploit some design defects of Renren to attack internal network