Cloud Security

Lenovo System Update Signature Verification Vulnerability (CVE-2015-2233)Lenovo System Update Signature Verification Vulnerability (CVE-2015-2233) Release date:Updated on:Affected Systems: Lenovo System Update Description: CVE (CAN) ID: CVE-20

WebKit Memory Corruption Vulnerability (CVE-2015-1152)WebKit Memory Corruption Vulnerability (CVE-2015-1152) Release date:Updated on:Affected Systems: Apple Safari Apple Safari Apple Safari Description: Bugtraq id: 74525CVE (CAN) ID: CVE-2015-

WebKit User Interface URI Spoofing Vulnerability (CVE-2015-1156)WebKit User Interface URI Spoofing Vulnerability (CVE-2015-1156) Release date:Updated on:Affected Systems: Apple Safari Apple Safari Apple Safari Description: Bugtraq id:

Unauthorized access to an Order System in Shanghai zhilongUnauthorized access to an Order System in Shanghai zhilong Release date:Updated on:Affected Systems: Wiselong Description: Shanghai zhilong Enterprise Management Co., Ltd. (Wiselong) is

Attack Script For MS15-034 Powershell Early on Thursday, I was refreshed by Microsoft's latest ms15-034 vulnerability announcement. Ms15-034 vulnerability occurs in http. sys File. this file is an important component of iis. Its functions and

Dnsmasq "setup_reply ()" DoS VulnerabilityDnsmasq "setup_reply ()" DoS Vulnerability Release date:Updated on:Affected Systems: Dnsmasq Description: CVE (CAN) ID: CVE-2015-3294Dnsmasq is a lightweight DNS forwarder and DHCP server.Dnsmasq has a

HP Capture and Route Software information leakage (CVE-2015-2115)HP Capture and Route Software information leakage (CVE-2015-2115) Release date:Updated on:Affected Systems: HP Capture and Route Software HP Capture and Route Software HP Capture and

Unwrapped hacker links When we download RAR or ZIP packages of videos and audio from the Internet, we sometimes find that, one or more files may be named "playback must read" or "installation must read". These files may be HTML webpage link files

Improper 21CN configuration can be controlled by the certificate, resulting in man-in-the-middle attacks Improper 21CN configuration can be attacked by man-in-the-middle. Http://www.21cn.com Simply put, 21CN personal mailbox (http://hermes.mail.21cn.

Weton online behavior management system vulnerability Packaging It contains one Arbitrary File Download, and two arbitrary code execution getshell. You do not need to log on. We will not commit the code individually and we will leave it to future

Dos classification for juniper Protection Detection Juniper DOS Classification I. Network dos 1. SYN Flood Use three-way handshakes for spoofing attacks A sends SYN fragments to B, B uses SYN/ACK fragments for response, and A uses ACK fragments for

Quantum encryption of light speed operation Imagine the following three scenarios: Hospitals send MRI results directly to your mobile phone without worrying about your personal health data leakage; learn that your financial information is safe to

Interesting Password Encryption Policy. Do you know how your password is stored on your website?In the early days of hash encryption, the system may directly store the user's plaintext password, and the password will be saved for what it is, and

No backdoor found: the open-source encryption software TrueCrypt security audit is complete TrueCrypt is a popular open-source file encryption software, which includes a large number of "sensitive people" (such as businessmen, politicians,

How did I perform penetration testing? How did I succeed in XXoo luweikang Biological Engineering Co., Ltd. 219.133.197.57: 88 VA weak password ~~~Login successful   Then, click FAQ-options-internet Options.  Privacy-Import    Right-

Attackers can execute arbitrary system commands and risks of CSRF after the backend logon of the Newifi y1 router is bypassed. Http://link.baidu.com/myrouter/wifiLogin? Target = self & getNasBduss = 1 & toUrl = http: //

Jiaxiao technology SMS SQL Injection http://sms.finereason.com/ First, register a user and log in. Then http://sms.finereason.com/member/ComSms.asp?tid=1 Injection exists. Use burp to capture the packet and save it. GET /member/ComSms.asp?tid=1*

SQL Injection exists in an important system of GreenTree Inn A certain important system in GreenTree Inn has 14 databases involved in SQL injection. Problem: POST /op/Module_ERP/UserActive.aspx?userid=1997* HTTP/1.1Host:

U-Mail system second injection (no problem, you can directly obtain the administrator password) U-Mail don't cry. In addition, the wooyun-2010-093049 update does not need to log on and can be batch getshell exp, casually tested, batch easily get

Attackers can bypass the abnormal graph to test China Mobile's Internet pass brute force cracking and credential stuffing. The mobile Internet pass allows you to log on to multiple business systems and is a unified authentication account. It is