Cloud Security

Squid cachemgr. cgi Arbitrary Code Execution Vulnerability (CVE-2016-4051)Squid cachemgr. cgi Arbitrary Code Execution Vulnerability (CVE-2016-4051) Release date:Updated on:Affected Systems: Squid 4.x Squid 3.x Squid 2.x Description: CVE (CAN)

Linux kernel digi_port_init DoS Vulnerability (CVE-2016-3140)Linux kernel digi_port_init DoS Vulnerability (CVE-2016-3140) Release date:Updated on:Affected Systems: Linux kernel 〈 4.5.1 Description: CVE (CAN) ID: CVE-2016-3140Linux Kernel is the

Linux kernel ext4 Denial of Service Vulnerability (CVE-2015-8324)Linux kernel ext4 Denial of Service Vulnerability (CVE-2015-8324) Release date:Updated on:Affected Systems: Linux kernel Description: CVE (CAN) ID: CVE-2015-8324Linux Kernel is the

Linux kernel treo_attach Denial-of-Service Vulnerability (CVE-2016-2782)Linux kernel treo_attach Denial-of-Service Vulnerability (CVE-2016-2782) Release date:Updated on:Affected Systems: Linux kernel 〈 4.5 Description: CVE (CAN) ID:

Linux kernel sotm_reclaim_thread DoS Vulnerability (CVE-2015-8845)Linux kernel sotm_reclaim_thread DoS Vulnerability (CVE-2015-8845) Release date:Updated on:Affected Systems: Linux kernel Description: CVE (CAN) ID: CVE-2015-8845Linux Kernel is the

Linux kernel signal Denial of Service Vulnerability (CVE-2015-8844)Linux kernel signal Denial of Service Vulnerability (CVE-2015-8844) Release date:Updated on:Affected Systems: Linux kernel 〈 4.3.5 Description: CVE (CAN) ID: CVE-2015-8844Linux

Huawei ICMPv6 DoS Vulnerability (CVE-2015-8676)Huawei ICMPv6 DoS Vulnerability (CVE-2015-8676) Release date:Updated on:Affected Systems: Huawei switches Description: CVE (CAN) ID: CVE-2015-8676Huawei is a provider of information and

LibTIFF NeXTDecode Denial of Service Vulnerability (CVE-2015-1547)LibTIFF NeXTDecode Denial of Service Vulnerability (CVE-2015-1547) Release date:Updated on:Affected Systems: LibTIFF Description: CVE (CAN) ID: CVE-2015-1547LibTIFF is a library

LibTIFF tif_getimage.c Denial of Service Vulnerability (CVE-2015-8665)LibTIFF tif_getimage.c Denial of Service Vulnerability (CVE-2015-8665) Release date:Updated on:Affected Systems: LibTIFF 4.0.6LibTIFF Description: CVE (CAN) ID: CVE-2015-8665

Huawei P8 Video0 information leakage/Denial of Service Vulnerability (CVE-2015-8682)Huawei P8 Video0 information leakage/Denial of Service Vulnerability (CVE-2015-8682) Release date:Updated on:Affected Systems: Huawei P8Huawei Mate S Description:

SQL injection vulnerability in an interface of Sina leju SQL injection vulnerability in an interface of Sina leju Url:Http://tj.newsesf.leju.com: 80/im_ajax.php? Action = get_agentinfo_byuid & t = 1460826734181 & uid = 8156628Payload injection

The short URL service may expose your sensitive information.   Vitaly Shmatikov and Martin Georgiev, security researchers from Cornell Tech, found that if the web short site service uses predictable operations, sensitive information on the website

In the process of entering a bad station, do not enter 1. Information CollectionThe page is html, and the content url is http://www.xxoo.com/html/news/notes/pages/2013/12/24/81.html, which should be generated for a dynamic pageDetermine from the

How did I access your Netease account (the official account is used as an example) Third-party logon via weibo on Netease news client can be bypassed. to log on to any user, take the official account as an example. Http://3g.163.com/ntes/special/00

Shanghai citizen cloud app SQL Injection SQL Injection at a certain place in the Shanghai citizen cloud APP.Open the APP and a link is found during packet capture http://218.78.214.24:8080/live/service/top/hasNewOrgan?code=310112110&username=eshimin3

Dongle SQL Injection rules Bypass 1: This test is only applicableUnion select for Research and Testing2: id = 1 union select 1, 2, 3The contents of fuzz were as follows:8e0, \ N, 0.03: The test id = 1 8e0union select 1, 2, 3 is blocked.4: therefore,

Another SQL injection in the vivo App Store (where to fall and where to climb) ---Parameter: an (POST) Type: AND/OR time-based blind Title: MySQL >= 5.0.12 AND time-based blind (SELECT) Payload: nt=WIFI&model=vivo

Yiqixiu unauthorized modification of information to arbitrary User Login An interface of Yi qixiu unauthorized modification of any user information, resulting in the ability to log on to any account and then control the account through the password

Tom adds Getshell to a server Source Code leak. First, visit http: // 202.108.12.127/to know that this is a TOM site. First, the source code leaks http: // 202.108.12.127/. phphttp: // 202.108.12.127 /. svn/entries second source code leakage: http:

Some users do not know how to prevent secure logon using cookies As a web developer, the user login function cannot be avoided. But how many security technologies do you know about user login?Generally, cainiao only knows how to save user