Cloud Security

Gajim Information Leakage Vulnerability (CVE-2015-8688)Gajim Information Leakage Vulnerability (CVE-2015-8688) Release date:Updated on:Affected Systems: Gajim Description: CVE (CAN) ID: CVE-2015-8688Gajim is a Jabber Client written in

PhpMyAdmin suggestPassword Function Vulnerability (CVE-2016-1927)PhpMyAdmin suggestPassword Function Vulnerability (CVE-2016-1927) Release date:Updated on:Affected Systems: phpMyAdmin phpMyAdmin 4.5.4 > 4.5.xphpMyAdmin phpMyAdmin 4.4.15.3 >

Apache Xerces-c xml Parser Buffer Overflow Vulnerability (CVE-2016-0729)Apache Xerces-c xml Parser Buffer Overflow Vulnerability (CVE-2016-0729) Release date:Updated on:Affected Systems: Apache Group Xerces C ++ Description: CVE (CAN) ID: CVE-

OpenSSL Bleichenbacher oracle Vulnerability (CVE-2016-0704)OpenSSL Bleichenbacher Oracle Vulnerability (CVE-2016-0704) Release date:Updated on:Affected Systems: OpenSSL Project OpenSSL 〈＝1.0.0qOpenSSL Project OpenSSL 〈＝ 1.0.1lOpenSSL Project OpenSSL

Wireshark DNP3 parser DoS Vulnerability (CVE-2016-2523)Wireshark DNP3 parser DoS Vulnerability (CVE-2016-2523) Release date:Updated on:Affected Systems: Wireshark Wireshark 2.0.x Description: CVE (CAN) ID: CVE-2016-2523Wireshark is the most

Security researchers have successfully designed a new attack method to steal keys from Android and iOS Mobile Phones. Existing security researchers have successfully designed an attack method to obtain encryption keys, Apple Pay accounts, and other

Finecms Affected version 2.3.0 and earlier versions updated from January 14, April 18. This problem does not exist in the latest version. Wooyun blew a http://www.wooyun.org/bugs/wooyun-2014-060197 using brute-force cracking verification code to

Be careful when you have ears: The project code for stealing target information using electromagnetic radiation is open-source  Recently, a computer technical expert William Entriken invented a new method that allows computers to send wireless

General-purpose command execution in the security management system of the central soft unified terminal (Java deserialization case) "United Endpoint Management (UEM)", with its brand new security concept, powerful function system, and sound

2345 filtering is required for SQL injection of a substation 2345 SQL Injection for a substation 2345 grand League union.2345.comInjection PointHttp://union.2345.com/jifen/mall/index.php? Category = & priceArea = & sendto = 1% 27% 20and % 20% 271% 27

Information on the platform interface of the Didi driver client is leaked (the information is stored in the ShareSDK. xml file) Didi driver information leakage Information of Android mobile client of Didi driver is leaked, which exposes interface

Technical explanation of ransomware PadCrypty domain name Generation Algorithm PadCrypt is the name of a ransomware, which was first mentioned on Twitter @ abuse_ch. BleepinComputer.com wrote two articles about PadCrypt. MalwareHunterTeam also

A site in HC has the SQL injection vulnerability involving more than 20 thousand pieces of user data. HC household electronics City has the SQL injection vulnerability, involving 27033 pieces of user dataVulnerability URL:

You can view the content of the private letter of any beauty broadcaster on Yingke live. Bored to watch the beauty broadcaster on the Yingke app, and found the secret of the broadcaster... Www. inke. TV is afraid of a duplicate name first.  First,

How can I meet FREE TALK in four or nine cities? Beijing site issue collection     Young people carry books in their stomachs, ambitions in their minds, Yang and the girl in their hearts, complete hardware and software, and fill them with

Multiple TCL system commands have the executable Vulnerability (involving 6 management platforms, management systems, and multiple database account passwords) Multiple TCL System Command Execution Vulnerabilities (two Windows servers have won \ 6

Command Execution in a system in Guizhou Province (involving details of nearly one million female family planning staff) Command Execution in a system in Guizhou Province (involving nearly one million female family planning staff/involving a large

A detailed analysis of Xtep security detection report (involving multiple backbone systems and numerous internal information data) A detailed analysis of Xtep security detection report (involving multiple backbone systems/involving a large amount of

Commands executed by a substation in Kingdee may be further infiltrated by the intranet due to being unauthorized Further Intranet penetration Http://dmp.kingdee.com/jenkins/scriptCommand Execution caused by unauthorized access to the jenkins System 

A rare MSSQL injection vulnerability in the Google Rewards Program The author is going to share a fairly rare vulnerability found in last year's Google rewards program, the only one that the author has encountered throughout his penetration testing