Cloud Security

MySQL MyISAM insecure temporary File Creation Vulnerability Release date:Updated on: Affected Systems:Mysql MyISAMDescription:Bugtraq id: 69732CVE (CAN) ID: CVE-2014-4274 MySQL MyISAM is the default storage engine for MySQL relational data

D-Bus local Heap Buffer Overflow Vulnerability (CVE-2014-3635) Release date:Updated on: Affected Systems:D-Bus 1.8.xDescription:Bugtraq id: 69831CVE (CAN) ID: CVE-2014-3635 D-Bus is an asynchronous inter-process communication system. It is mainly

Apt Security Restriction Bypass Vulnerability (CVE-2014-0488) Release date:Updated on: Affected Systems:Ubuntu aptDescription:Bugtraq id: 69838CVE (CAN) ID: CVE-2014-0488 The apt package is the advanced frontend of dpkg. When APT has never been

Oracle MySQL Client yaSSL certificate Decoding Buffer Overflow Vulnerability Release date:Updated on: Affected Systems:Oracle MySQLUnaffected system:Oracle MySQL 5.6.20Oracle MySQL 5.5.39Description:Bugtraq id: 69743 MySQL is an open-source

NetBSD Kernel "execve ()" Denial of Service Vulnerability Release date:Updated on: Affected Systems:NetBSD 6.1-6.1.4NetBSD 6.0-6.0.4Description:NetBSD is a free and highly customizable Unix-like operating system suitable for multiple platforms,

Linux Kernel "assoc_array_gc ()" null pointer indirect reference vulnerability Release date:Updated on: Affected Systems:Linux kernel 3.16.2-3.14.18Description:CVE (CAN) ID: CVE-2014-3631 Linux Kernel is the Kernel of the Linux operating system.

Baidu browser 6.4.0.4920.counterfeit arbitrary URL Baidu browser 6.4.0.49133 and earlier versions forge arbitrary website vulnerabilities, forge arbitrary protocols (http/https/ftp...), domain names, URLsAn error occurs when the URL length is

Libndp 'ndp _ msg_opt_dnssl_domain () 'Function Buffer Overflow Vulnerability Release date:Updated on: Affected Systems:LibndpDescription:--------------------------------------------------------------------------------Bugtraq id: 68945CVE (CAN) ID:

Adobe Flash Player and AIR Stack Buffer Overflow Vulnerability (CVE-2014-0556) Release date:Updated on: Affected Systems:Adobe Flash PlayerAdobe AIRDescription:Bugtraq id: 69696CVE (CAN) ID: CVE-2014-0556 Adobe Flash Player is an integrated

FreePBX cross-site scripting and Command Injection Vulnerability Release date:Updated on: Affected Systems:FreePBX 2.9FreePBX 2.10Description:--------------------------------------------------------------------------------Bugtraq id: 52630Cve id:

EmFTP Arbitrary Code Execution Vulnerability (CVE-2014-3910) Released on: 2014-09-04Updated on: 2014-09-05 Affected Systems:EmFTPDescription:--------------------------------------------------------------------------------Bugtraq id: 69623CVE (CAN)

WHMCS 'serialize () 'Remote PHP Code Execution Vulnerability Release date:Updated on: Affected Systems:WHMCS WHMCS WHMCSDescription:--------------------------------------------------------------------------------Bugtraq id: 63858 WHMCS is an

Why does the website require https to prevent hacker attacks? Everyone knows a famous online saying and famous cartoon "on the Internet, no one knows that you are a dog ":   This is dangerous for online shopping and e-commerce, because you cannot

ECShop arbitrary User Password blind Change Vulnerability ECShop password retrieval function design defect, changing the password link is not time-effective You can use the search engine to search for keywords to reset the passwords of some users on

Web Application Management backend SQL injection can cause full-site Trojans Http://appgame.candou.com Admin 'or '1' = '1Admin 'or '1' = '1Go directly to the background    If I directly edit and add a game ~~ What do you know about Trojans... Your

FreeCms kills SQL Injection Vulnerability Recently, the company's javaee business only mentioned pistol PR.Order injection is not only one of them, but also similar injection points in order, for example, CommentAction. Here we only write one. Both

DiscuzX Arbitrary File Operation Vulnerability DiscuzX Arbitrary File Operation VulnerabilityThe vulnerability is actually caused by the deletion of arbitrary files. However, the deletion function is easy to locate and therefore cannot be written in

DedeCMS-V5.7-UTF8-SP1 csrf getshell no member center required Recently, csrf went viral again, and various csrf pants were removed. The dede background is easy to write getshell directly.I 've been trying the black box in the white box and found

TSRC challenge: waf SQL Injection bypass challenge recordBlog Author: lol [TSRC white hats] Author: Conqu3r, if flowers bloom from the team: [Pax. mac Team] was invited to participate in the tsrc waf defense bypass challenge. Since we had previously

Record a broken win8 hacker infiltration attack This is the case. If I have been an intern at Company A for A while, I WANT TO PENETRATE Company A, scan various tools, and finally find an injection point and get the background password, after