Cloud Security

Wind River VXWorks TCP predictable Vulnerability (CVE-2015-3963)Wind River VXWorks TCP predictable Vulnerability (CVE-2015-3963) Release date:Updated on:Affected Systems: Wind River Systems VxWorks 7.xWind River Systems VxWorks 6.x Description:

EMC unis for VMAX Remote Code Execution Vulnerability (CVE-2015-0545)EMC unis for VMAX Remote Code Execution Vulnerability (CVE-2015-0545) Release date:Updated on:Affected Systems: EMC uniseries for VMAX Description: CVE (CAN) ID: CVE-2015-0545

DedeCMS Arbitrary Code Execution Vulnerability (CVE-2015-4553)DedeCMS Arbitrary Code Execution Vulnerability (CVE-2015-4553) Release date:Updated on:Affected Systems: Dedecms Description: Bugtraq id: 75285CVE (CAN) ID: CVE-2015-4553DedeCms is

Cisco IM and Presence Service Privilege Escalation Vulnerability (CVE-2015-4221)Cisco IM and Presence Service Privilege Escalation Vulnerability (CVE-2015-4221) Release date:Updated on:Affected Systems: Cisco uniied Communications Manager IM and

Remote Command Injection leakage (CVE-2014-9284) for multiple Buffalo Routers)Remote Command Injection leakage (CVE-2014-9284) for multiple Buffalo Routers) Release date:Updated on:Affected Systems: Buffalo Technology Routers WSR-600DHPBuffalo

New OpenSSL vulnerabilities affect the latest versions of Firefox and Chrome OpenSSL exposes multiple medium or low-risk security vulnerabilities. One of the vulnerabilities allows man-in-the-middle attackers to reduce the encryption strength of

Libmspack chmd_init_decomp Function Denial of Service Vulnerability (CVE-2015-4467)Libmspack chmd_init_decomp Function Denial of Service Vulnerability (CVE-2015-4467) Release date:Updated on:Affected Systems: Libmspack libmspack Description:

Linux Kernel local information leakage Vulnerability (CVE-2014-9731)Linux Kernel local information leakage Vulnerability (CVE-2014-9731) Release date:Updated on:Affected Systems: Linux kernel Description: Bugtraq id: 75001CVE (CAN) ID: CVE-2014

Debugging of the shelled ELF This article only discusses how to debug the shelled ELF file, including the use of Debugging techniques and solutions to possible problems during debugging, DEX does not contain how to restore the reinforcement. This

Is it reliable to use an expression as a password? What can we do with passwords? Password, it's hard to say you love you Generally, we recommend that you use a unique, complex, and preferably containing a weird character password, but you will

General SQL Injection bypass skills (using mysql features) Directly add syntax select * from users where id=8E0union select 1,2,3,4,5,6,7,8,9,0select * from users where id=8.0union select 1,2,3,4,5,6,7,8,9,0select * from users where id=\Nunion

Sohu focal financial wallet multiple CSRF hijacking of arbitrary accounts and Solutions Http://ibank.focus.cn/account/ Token is not set for Multiple sensitive operations in the account.Set the problem csrf poc: 

178 SQL injection vulnerability in an important game website For a female colleague's birthday, I asked her what gift she wanted? She said, the relationship between us is good. Can you give me a practical and forced gift. So I gave her a pair of

The management Permission Bypass Vulnerability exists on the N new routers under Baidu (routing control permission can be hijacked within the network segment) I do not know whether the route is Baidu or Lenovo.This is what the two of you jointly

Vulnerability exploitation in penetration testing1. The purpose of exploits is to simply understand known vulnerabilities in the network, and comprehensive security control over the network and system is insufficient. Targeted, comprehensive

Accidentally cracked others' static libraries Note: The purpose of this article is only for the purpose of communication and learning. Do not use it for commercial purposes. Otherwise, the author of this article will not be liable for any

Ao you browser defects cause remote reading of user data + ao you main site XSS Found through mxwebkit. dll of aoyouAnalyzed mx: // res/error/danger_site.htm? The url will jump to the main siteHttp://www.maxthon.cn/security/safe? Url = XXXThe main

View database security from security attack instances Abstract: The War of war said: know each other and never fight. The confrontation between power and defense is the topic of Information Security. Only by understanding security attacks can we

Rednet Forum horizontal Privilege Escalation Vulnerability The rednet Forum has a horizontal Privilege Escalation Vulnerability. You can view others' personal data at will. When the password is changed, the new password is displayed in plaintext on

How can I win all the business of qingting fm? How can I win all the business of qingting fm? 1. Find the substation. The following second-level domain names are foundHttp://star.cms.qingting.fm/phpcms get shell through getshell at the front end2.