Cloud Security

GParted OS Command Execution Vulnerability Release date:Updated on: Affected Systems:GParted Unaffected system:GParted> = 0.15.0Description:CVE (CAN) ID: CVE-2014-7208 GParted is a graphic disk partition management editor. Gparted *>

FFmpeg 'libavcodec/mjpegdec. c' cross-border Denial of Service Vulnerability Release date:Updated on: Affected Systems:FFmpeg 2.xDescription:Bugtraq id: 71616CVE (CAN) ID: CVE-2014-9316 FFmpeg is a free software that allows you to perform video,

Intrexx Arbitrary File Upload Vulnerability (CVE-2014-2025) Release date:Updated on: Affected Systems:Intrexx Professional 6.0Intrexx Professional 5.2Description:Bugtraq id: 71672CVE (CAN) ID: CVE-2014-2025 Intrexx is an integrated cross-platform

Apache HTTP Server 'mod _ proxy_fcgi 'DoS Vulnerability Release date: 2014-10-07Updated on: Affected Systems:Apache Group HTTP Server 2.4.10Description:Bugtraq id: 71657CVE (CAN) ID: CVE-2014-3583 Apache HTTP Server is an open-source Web Server of

Cheetah Security browser CSP Security Policy Bypass Recently, browser vulnerabilities are very popular... So I watched it silently.I usually use many cheetahs and recently studied CSPs. So I accidentally found this BUG, which does not exist in other

Usage of. git/config file Leakage This vulnerability is similar to svn leakage. You can also restore the entire project process based on the configuration file. According to the vulnerability prompt, found the exploitation tool: rip-git.pl Based on

Changing the network security situation: why not find the next-generation firewall? The next generation firewall provides many new features, but how to add the next generation firewall to the security product components is worth considering ......  

SoakSoak malware tracing Research Report   On June 23, December 14, 2014, a foreign Sucuri security blog reported that a large number of WordPress sites were affected by SoakSoak malware. It is reported that the malware will infect the WordPress

74cms (20141112) Unauthorized Access Unauthorized access to others' resumes This vulnerability was later thought of as high-risk. Why?You can send the resume (resume_id) of any account to any job (job_id) published by any company, causing

PHP a chicken ribs open_basedir Bypass PHP open_basedir Bypass Compare one of the chicken ribsDetermine whether a file existsAdded a new function in php5.3.2, stream_resolve_include_path.Use stream_resolve_include_path ($ filename). If the file

TIPS: get a database of a Baidu Forum (millions of users) TIPS: get a database of a Baidu Forum Http://bbs. OS .baidu.com/forum.phpBaidu cloud OS ForumHttp://bbs. OS .baidu.com/uc_server/ ucserver has set access restrictionsHowever, based on the uc

A SQL injection vulnerability in GreenTree Inn   Business Operating System:  Http://system.greentree.com.cn: 8080/op/Module_ERP/home.htm Prompt for MAC address verification  Do you think this is safe?Scan a menu list with Yu Jian. 

Without restrictions on getshell for uploading system files Vulnerability files /Lm/sys/opr_uploadimg.jspCode that causes the Vulnerability  If (action. equals ("upload") {// construct the upload class, and pass in the upload path CommonUploadFile

Phpok4.2.068 latest SQL Injection   /Framework/www/project_control.php... $ ext = $ this-> get ("ext ");... if ($ ext & is_array ($ ext) {$ c = ''; foreach ($ ext AS $ key => $ value) {if ($ key & $ value) {$ c [] = "ext. ". $ key. "LIKE '% ". $

Easy link system Remote Access system Client remote command execution/Trojan Installation Vulnerability It is actually a VPN + SSLVPN product. I have no intention of discovering that an enterprise is using this product. It seems that the employees

An interface defect of Ctrip can hit the database (some data has been tested) and SMS bombing Interface 1. the login interface is not protected, resulting in credential stuffing. A large number of user passwords can be guessed.Interface 2. SMS

Error in dog customization and cropping logic, leading to csrf pants Removal The system interaction degree of csrf trousers caused by a custom cropping logic error of the dog is relatively large. View the Code directly:  db.mod.php:(576-620)：$f =

Cmseasy logical defects can be upgraded to an administrator for common users (is shell still difficult) Cmseasy logical defects can be upgraded to administrator for common users User_act.php (130-155 ): if (front::post('submit')) { if

Black magic of squirrel-XSS Exploitation Currently, XSS vulnerabilities are common, but there are not many tricks. I hope this topic will serve as an example to attract more people to share interesting gameplay. This topic describes some basic XSS

A website in sogou is incorrectly configured and directly posts data to the Intranet. A website in sogou is incorrectly configured and directly posts data to the Intranet. CVE-2014-3393, Cisco Adaptive Security Appliance (ASA) Software has Security