Cloud Security

GNU patch 'set _ hunkmax () 'Function Denial of Service Vulnerability Release date:Updated on: Affected Systems:GNU patchDescription:Bugtraq id: 72286CVE (CAN) ID: CVE-2014-9637 GNU patch is part of the GNU project. You can update the original

Juniper Junos rpd Remote Denial of Service Vulnerability (CVE-2014-6386) Release date:Updated on: Affected Systems:Juniper Networks JUNOSDescription:Bugtraq id: 72067CVE (CAN) ID: CVE-2014-6386 JunosE is an operating system used in the e-series

Adobe Flash Player Memory Corruption Vulnerability (CVE-2015-0310) Release date:Updated on: Affected Systems:Adobe Flash Player Adobe Flash Player Adobe Flash Player Unaffected system:Adobe Flash Player 16.0.0.287Adobe Flash Player 13.0.0.262Adobe

Reuse Remote Code Execution Vulnerability (CVE-2015-1031) after multiple Privoxy releases) Release date:Updated on: Affected Systems:Privoxy 3.0.22Description:Bugtraq id: 71993CVE (CAN) ID: CVE-2015-1031 Privoxy is a non-Cache Web Proxy. In

Libpng Multiple Heap Buffer Overflow Vulnerabilities (CVE-2015-0973) Release date:Updated on: Affected Systems:Libpng 1.6.15Description:Bugtraq id: 71994CVE (CAN) ID: CVE-2015-0973 Libpng is a function library used by various applications to

Bilibili rsync access control error causes data leakage An rsync Service does not have proper permission control, resulting in file access. Rsync 121.52.243.4: websyncDrwxr-xr-x 4096 09:53:57.-Rw-r -- 317 11:54:39 createKey-Rwxr-xr-x 86 20:18:07

Linux Kernel 'fragmentation. c' DoS Vulnerability Release date:Updated on: Affected Systems:Linux kernel Description:Bugtraq id: 71847CVE (CAN) ID: CVE-2014-9428 Linux Kernel is the Kernel of the Linux operating system. Earlier than Linux Kernel 3.18

Linux Kernel 'fs/isofs/rock. c' local information leakage Vulnerability Release date:Updated on: Affected Systems:Linux kernelDescription:Bugtraq id: 71883 Linux Kernel is the Kernel of the Linux operating system. Linux kernel has a local

Research Report on remote command execution of Asus router port 9999 On June 23, October 3, 2014, foreign security researcher Joshua J. Drake submitted a remote command execution vulnerability poc for the Asus router on his github. The vulnerability

Php cloud authorization V3.1 9.231. Follow up: Allows recruiters to follow you, or job seekers to follow you.2. Pay attention to the problem. You can post questions for your attention.Uid indicates the auto-increment value during registration. 1.

Mysqlinjection (with verification script) Mysqlinjection (with verification script) Injection point: www.wangjiu.com/ajax/ajaxExec.action?article_id=if(length(user())=20,sleep(5),0)&index=article_browsing_times!update The articl_id parameter can be

Flask uses token to defend against csrf cross-site attacks As a pytoner engineer, you often need to write web files. Then you are at risk of being attacked. For example, for Csrf attacks, I will not describe csrf in detail here. I think you should

360 website guard SQL Injection bypass case 1 Don't worry about using 360. Find the IP address of the origin server in the site_report file of netcraft, directly remove SQL pants, or even get server permissions. Websites with

Youku Server File Reading Youku Server File Reading and internal information leakage There are problems with several servers in the advertising system. Attackers can read arbitrary files and have the root permission.  The following are the

A problem left by Haier leads to access to the primary store of the mall and Solutions Leakage of mall users and order libraries can be caused by a legacy problem of Haier accessing the Intranet and weak Intranet

Empirebak omnipotent cookie and shell 1. Counterfeit cookie login system (in fact, this step is redundant. Most users have not changed their passwords, and the default value is 123456) Four cookies are successfully set for Logon. Check the

Kingsoft enterprise terminal protection optimization system (getshell) Directly use shell .. Clean Intranet View codeConsole \ tools \ manage \ upload. php '; if (move_uploaded_file ($ _ FILES ['file'] ['tmp _ name'], $ uploadfile) {echo "file is

Improper UCweb O & M results in leakage of sensitive information (databases, logs, etc) Information Leakage .... 1. Weak mysql account passwordDb_host => 119.147.224.171Db_port = & gt; 3306Db_username => nemoDb_password => nemoThere are a lot of

A hitao system may cause leakage of tens of millions of user data. User data includes:Order No. (order_id)/Total order amount (final_amount)/payment status (pay_status)/order time (createtime)/member username (member_id)/shipping region/login IP/  1

SSRF (with verification script) SSRF (with verification script) SSRF is located:  http://tuanbai.baidu.com/apiCheckv1/?url=http://10.42.7.78 HTTP Status 200, will return  Retrieving data from the API does not conform to our specified XML