Cloud Security

Huawei Tecal RH Series Security Vulnerability Release date:Updated on: Affected Systems:Huawei Tecal RH SeriesDescription:Huawei Tecal RH Series is a rack server product. An error occurs when the Huawei Tecal RH series processes the length of the

Remote Denial of Service Vulnerability (CVE-2014-8901) for multiple IBM DB2 Products) Release date:Updated on: Affected Systems:IBM DB2 IBM DB2 9.8-FP5IBM DB2 9.7-FP10IBM DB2 9.5-FP10IBM DB2 10.1-FP4Description:Bugtraq id: 71734CVE (CAN) ID: CVE-20

FFmpeg 'libavcodec/rawdec. c' cross-border Denial of Service Vulnerability Release date:Updated on: Affected Systems:FFmpeg 2.xDescription:Bugtraq id: 71618CVE (CAN) ID: CVE-2014-9318 FFmpeg is a free software that allows you to perform video,

X. Org X Server protocol to handle Multiple Integer Overflow Vulnerabilities Release date:Updated on: Affected Systems:X.org X11Description:Bugtraq id: 71595CVE (CAN) ID: CVE-2014-8092 X. Org Server is the official reference implementation of X

Apple Safari cross-origin Vulnerability (CVE-2014-4465) Release date: 2014-3 3Updated on: Affected Systems:Apple Safari Apple Safari Description:Bugtraq id: 71439CVE (CAN) ID: CVE-2014-4465 IOS is an operating system developed by Apple for mobile

Cheetah Security browser CSP Security Policy Bypass Recently, browser vulnerabilities are very popular... So I watched it silently.I usually use many cheetahs and recently studied CSPs. So I accidentally found this BUG, which does not exist in other

Mongodb Unauthorized Access Vulnerability Detection report for the entire network[+] Author: f1, 2, 4 [+] Team: FF0000 TEAM [+] From: HackerSoul [+] Create: 2014-12-10IntroductionDomain listProof of ConceptScan resultsIP locationedevil

Technical analysis: smart hardware worms threaten Internet Security Reference:  The global Internet DNS traffic has been abnormal since the previous day (January 1, December 10. The cloud dike Team (DamDDoS) Quickly participated in analysis and

SoakSoak malware tracing Research Report   On June 23, December 14, 2014, a foreign Sucuri security blog reported that a large number of WordPress sites were affected by SoakSoak malware. It is reported that the malware will infect the WordPress

Caijing website XSS Worm Worm = XSS + csrf  Address: http://tnew.caijing.com.cn/First post the post, directly post four parameters without token verification, resulting in a csrf vulnerability.    After reading the stored XSS, the post content is

MySQL injection vulnerability in a substation in Baidu MySQL injection vulnerability in a substation in Baidu DoS attacks are allowed. The verification script is attached. Injection point:

Weak PHP security0x00 weak type No one doubts the simplicity and power of php. It provides many features for developers, one of which is the weak type mechanism. You can perform such operations in a weak type mechanism. Php does not strictly check

Php cloud two SQL secondary injection Php cloud two-site secondary injection The latest version. Two injection points. Along with a little trick to bypass waf.First:/member/model/index. class. php39 rows  function index_action(){$this->public_action(

XSS Principle Analysis and anatomy: Chapter 4 (coding and bypassing) 0 × 01 Preface Sorry, I have been pushing the fourth chapter for a few months. Today is New Year's Day, so I will write down Chapter 4. I will first describe the encoding mainly

Web security practice (15) CSRF (Cross-Site Request Forgery)-start with inserting pictures in the school 15.1 start from school (1) simple results It is said that the internal network is now China's largest student social networking website, and its

PHP a chicken ribs open_basedir Bypass PHP open_basedir Bypass Compare one of the chicken ribsDetermine whether a file existsAdded a new function in php5.3.2, stream_resolve_include_path.Use stream_resolve_include_path ($ filename). If the file

A SQL injection vulnerability in GreenTree Inn   Business Operating System:  Http://system.greentree.com.cn: 8080/op/Module_ERP/home.htm Prompt for MAC address verification  Do you think this is safe?Scan a menu list with Yu Jian. 

Without restrictions on getshell for uploading system files Vulnerability files /Lm/sys/opr_uploadimg.jspCode that causes the Vulnerability  If (action. equals ("upload") {// construct the upload class, and pass in the upload path CommonUploadFile

Phpok4.2.068 latest SQL Injection   /Framework/www/project_control.php... $ ext = $ this-> get ("ext ");... if ($ ext & is_array ($ ext) {$ c = ''; foreach ($ ext AS $ key => $ value) {if ($ key & $ value) {$ c [] = "ext. ". $ key. "LIKE '% ". $

An interface defect of Ctrip can hit the database (some data has been tested) and SMS bombing Interface 1. the login interface is not protected, resulting in credential stuffing. A large number of user passwords can be guessed.Interface 2. SMS