Cloud Security

LibVNCServer Denial of Service Vulnerability (CVE-2014-6052) Release date:Updated on: 2014-10-04 Affected Systems:LibVNCServerDescription:Bugtraq id: 70091CVE (CAN) ID: CVE-2014-6052 LibVNCServer is a cross-platform C library that can implement

PHP 'efree () 'function Remote Code Execution Vulnerability Release date: 2014-10-02Updated on: Affected Systems:PHPDescription:Bugtraq id: 70259CVE (CAN) ID: CVE-2014-3622 PHP is a widely used scripting language. It is especially suitable for

QEMU local DoS Vulnerability (CVE-2014-3640) Release date:Updated on: Affected Systems:QEMU 2.xDescription:Bugtraq id: 70237CVE (CAN) ID: CVE-2014-3640 QEMU is an open source simulator software. In versions earlier than QEMU 2.1.2, a null

Python 'bufferobject. c' Integer Overflow Vulnerability Release date:Updated on: Affected Systems:PythonUnaffected system:Python Description:Bugtraq id: 70089 Python is an object-oriented, literal translation computer programming language. In

WordPress Users Ultra plug-in 'view' parameter SQL Injection Vulnerability Release date:Updated on: Affected Systems:WordPress Users UltraDescription:Bugtraq id: 70176 WordPress Users Ultra is a plug-in for creating advanced user communities and

New malware iWorm has infected 17 thousand Mac computers worldwide Information security researchers recently discovered that more than 17 thousand Mac computers worldwide have been infected with a new OS X malware called iWorm. The malware used

A vast majority of large companies around the world have been immune to the Shellshock vulnerability. According to The Register report from The British technology news website CloudPassage, Fortune 1000 (USA) and Forbes ranked among The world's top

LibVNCServer Integer Overflow Vulnerability (CVE-2014-6051) Release date:Updated on: Affected Systems:LibVNCServerDescription:Bugtraq id: 70093CVE (CAN) ID: CVE-2014-6051 LibVNCServer is a cross-platform C library that can implement VNC server or

Two cross-origin problems in Mobile QQ for Android POC1      POC2 Test.html  Test. svg   

Arbitrary File Operations for OA Standard Edition In fact, it is the deletion of any file. The deletion function is well positioned, so the title is concealed. This arbitrary file can be deleted only in windows because it is a coincidence that the

The problem of parsing ie css can be caused by the new XSS Vectors. I want to write a small tool while helping my friends study how to bypass Sina's rich text filter.When I wrote a small tool, I found an accident.This was discovered when an accident

CVE-2014-6271 Data Summary Author: shawn0x00 what is BASH Bourne Again Shell (BASH) is the most popular SHELL implementation on GNU/Linux. It was born in 1980, after decades of evolution, a simple terminal command line interpreter has evolved into

ShellShock vulnerability Sample Analysis Report   I. Introduction to vulnerability events 1. Vulnerability Information ● Release time: 48 minutes 04 seconds ● cve id: CVE-2014-6271 ● affected version:   2. Vulnerability Overview Bash (GNU

4G Browser Remote Code Execution Vulnerability 4G Browser: http://4g.roboo.com/download dex2jar and jd-guiSearch addJavascriptInterface   Navigator interface VulnerabilityConstruct a Write File + pop-up window Exp:  test Pop-up

CentOS system security performance check Note: 1. Accounts check # Less/etc/passwd# Grep: 0:/etc/passwd Note that new users, UID, and GID are 0. 2. Log check Note "entered promiscuous mode" Note: Remote Procedure Call (rpc) programs with a log

General jige vulnerability packaging in Neusoft UniEAP The following system is developed using Neusoft UniEAP as the business framework: Inurl: siweb/login. do. It is estimated that some of the items cannot be searched. Google cannot use them. Baidu

The design bug of Sohu listening book allows you to listen to uncharged novels or stories at will. Sohu listens to Book Design Bugs and can listen to unordered novels, stories, and other related content online. Access http://ting.sohu.com/info/649/16

Cmseasy storage XSS (ignore 360 without logon) Cmseasy allows non-logged-on users to reply to the bbs reply, but the user name is retrieved from the COOKIE, resulting in security problems: /Bbs/ajax. php  userid; $ data ['addtime'] = mktime (); $

Xuehesi (good future) can obtain the highest permissions of the group's core online systems (covering the business systems in 38 cities and 3 Management Systems) The maximum management permission of the system is obtained due to a function defect.

Apple ID can easily hit the database and steal accounts Apple ID can be easily hit.It is actually hit by an icloud credential. No matter how many times the error occurs, the test finds that https://appleid.apple.com/signindoes not have a