Cloud Security

MySQL MyISAM insecure temporary File Creation Vulnerability Release date:Updated on: Affected Systems:Mysql MyISAMDescription:Bugtraq id: 69732CVE (CAN) ID: CVE-2014-4274 MySQL MyISAM is the default storage engine for MySQL relational data

Linux Kernel ceph/auth_x.c Buffer Overflow Vulnerability Release date:Updated on: Affected Systems:Linux kernelDescription:Bugtraq id: 69805 Linux Kernel is the Kernel of the Linux operating system. Linux kernel has a buffer overflow

D-Bus Denial of Service (CVE-2014-3638) Release date:Updated on: Affected Systems:D-Bus 1.8.xDescription:Bugtraq id: 69833CVE (CAN) ID: CVE-2014-3638 D-Bus is an asynchronous inter-process communication system. It is mainly used for system

D-Bus Denial of Service (CVE-2014-3637) Release date:Updated on: Affected Systems:D-Bus 1.8.xDescription:Bugtraq id: 69829CVE (CAN) ID: CVE-2014-3637 D-Bus is an asynchronous inter-process communication system. It is mainly used for system

MantisBT Null Byte poisoning LDAP Authentication Bypass Vulnerability Release date:Updated on: Affected Systems:Mantisbt Description:Bugtraq id: 69780CVE (CAN) ID: CVE-2014-3077 MantisBT is a Web-based bug Tracking System. MantisBT 1.2.17 and

Safari 7.0.4 may cause most XSS defense mechanisms to be bypassed (conditional) After many times, I feel that there is no room for further improvement.There is also a safari8, first submit this to see the depthFor XSS defense of URL context, many

Man-in-the-middle Vulnerability (CVE-2014-2379) for multiple Sensys networking products) Released on: 2014-09-05Updated on: 2014-09-09 Affected Systems:Sensys Networks VSN240-FSensys Networks VSN240-TDescription:Bugtraq id: 69644CVE (CAN) ID: CVE-2

Squid' src/icmp/Icmp4.cc 'Remote Denial of Service Vulnerability Release date:Updated on: Affected Systems:SquidDescription:Bugtraq id: 69688 Squid is an efficient Web Cache and proxy program. Squid 3.4.6 has a security vulnerability in

Firefox Remote Denial of Service Vulnerability If you only use innerHTML once, the browser will remind you whether to stop executing the script after a while. If you add an innerHTML operation, the CPU usage will remain at 100%.The memory will

Analysis of big data security incidents (NGSIEM), one of the most popular security technologies this year) Let's talk about another hot spot this year, NGSIEM. The challenges and trends of the next generation of security event analysis have been

D-Link command execution can obtain information such as the route password. Version: DIR-100 D1 4.02 Obtain route version information  Http: // address: 8080/cliget. cgi? Cmd = $ sys_model %; $ hw_cver %; $ sw_ver %; Obtain route account

Install Apache2 + ModSecurity and customize WAF rules on ubuntuAlthough VPS uses the cloud WAF function, it is still a little worried. For double insurance, we decided to use modsecurity to customize rules, the following describes how to configure

Analysis Report of "easy to understand thieves"Recently, Baidu security lab has monitored a new type of privacy theft virus that has a specific commercial purpose, "Easy to melt thieves". When borrowers apply for a loan on the online lending

A default Discuz plug-in has the local File Inclusion Vulnerability (shell is required for background configuration permissions) We have updated the program on the 18 th, so we are the first to start detection. You can see that there is a login

SQL injection vulnerability in NITC Marketing System Injection appears in cycle_image.php   "; $ SQL =" select * from ". $ site-> table ("ad "). "where your age_id = ". $ s [0]. "and category = '". $ s [1]. "'and type = 0 and state = 0 order by

A oa system does not need to log on to GetShell You do not need to log on to GetShell in an OA system. The official demo has been GetShell.Official: http://www.qioa.cn/ Kai Lai OA (including Standard Edition, government affairs office, Education

Ecshop Latest Version stores XSS to the background The stored XSS is directly stored in the background. It is easier for e-commerce websitesThe problem occurs on the user recharge page. If the payment is not successful, the method act = check is

Another try of JS poisoning I saw it half a month ago.‍‍‍EtherDream wrote the article about wifi traffic hijacking and JS poisoning, and it was a bit of fun in the company's laboratory. The first time I came into contact with this field, I felt

Download chapter 8 of CCNA Learning GuideA set of universal and interoperable Internal Gateway Routing Protocols (IGP) for the Internet began in 1988. At that time, OSPF (OpenShortest Path First) the Protocol is required to become a draft Internet

Finecms v2.3.2 getshell #1 (shell on the official website)The problem still occurs in the portrait upload area. The finecms Avatar upload code follows the phpcms. If you don't need to mention it, check the Code directly. /Member/controllers/Account.