Cloud Security

Internet Security-security of data transmission and data transmission Internet Security-talking about Data Transmission security. In the Internet world, the security issue of data hijacking is particularly prominent. How can we prevent data

Perform these five steps to effectively address enterprise cloud security and five steps to address security issues. These five steps can effectively cope with enterprise cloud security issues. Using public cloud services can bring many benefits to

The gnu c Library glob Stack Buffer Overflow Vulnerability (CVE-2016-1234)The gnu c Library glob Stack Buffer Overflow Vulnerability (CVE-2016-1234) Release date:Updated on:Affected Systems: Gnu c Library (glibc) Description: CVE (CAN) ID:

OpenSSL cross-Protocol Attack Vulnerability (CVE-2016-0800)OpenSSL cross-Protocol Attack Vulnerability (CVE-2016-0800) Release date:Updated on:Affected Systems: OpenSSL Project OpenSSL OpenSSL Project OpenSSL Unaffected system: OpenSSL Project

OpenSSL BIO _ * printf function Memory Corruption Vulnerability (CVE-2016-0799)OpenSSL BIO _ * printf function Memory Corruption Vulnerability (CVE-2016-0799) Release date:Updated on:Affected Systems: OpenSSL Project OpenSSL OpenSSL Project OpenSSL

Use PowerShell scripts for Windows keyboard Recorder Recently, I finally have the opportunity to contribute to the project PowerSploit that I often learn from.After Christmas in 2015, when I was in a rush to browse and prepare to delete my email, I

FFmpeg Information Disclosure Vulnerability (CVE-2016-1897)FFmpeg Information Disclosure Vulnerability (CVE-2016-1897) Release date:Updated on:Affected Systems: FFmpeg 2.x Description: CVE (CAN) ID: CVE-2016-1897FFmpeg is a free software that

Password Reset in Yiyou mail system can be cracked by brute force Rt The Yiyou mail system was used by a large number of users and found that answers to questions in Yiyou password retrieval could be brute-force cracked. If there is a simple

OwnCloud Server Arbitrary Code Execution Vulnerability (CVE-2015-7699)OwnCloud Server Arbitrary Code Execution Vulnerability (CVE-2015-7699) Release date:Updated on:Affected Systems: ownCloud ownCloud Server 〈 8.0.7ownCloud ownCloud Server 〈

Cisco IOS/ios xe IPv6 listener Denial of Service Vulnerability (CVE-2015-6278)Cisco IOS/ios xe IPv6 listener Denial of Service Vulnerability (CVE-2015-6278) Release date:Updated on:Affected Systems: Cisco IOSCisco IOS XE Description: CVE (CAN)

Mozilla Firefox memory corruption and DoS Vulnerability (CVE-2015-7180)Mozilla Firefox memory corruption and DoS Vulnerability (CVE-2015-7180) Release date:Updated on:Affected Systems: Mozilla Firefox & lt; 41.0Mozilla Firefox & lt; 38.3

Router hardware Extraction In the previous chapter, we have learned how to extract the root file system from the router firmware, and how to analyze and mine vulnerabilities. Starting from this chapter, we will learn some basic knowledge about

Asacub history: from spyware to malware Recently, security personnel on mobile banking Trojan Trojan-Banker.AndroidOS.Asacub for in-depth analysis, found that the malicious function with the version of the change continues to increase.Earlier

Weak passwords on the China Resources OLE management platform cause leakage of details of nearly 0.45 million users (including ID card numbers, mobile phone numbers, home addresses, etc) RT.. Management Platform: manager.crvole.com.cn weak

Do not expect STARTTLS to automatically encrypt your email   The researchers questioned the Security Email. Although currently STARTTLS (plain text communication protocol extension) and three other security extensions have been applied, they still

Burp technique for non-Webapp testing (I): interception and proxy listening Burp can be used not only for Web application testing. I often use Burp in mobile and fat client tests. If the application uses the HTTP method, Burp will definitely be your

PHP local File Inclusion Vulnerability environment setup and exploitation Analysis0x00 Introduction Php local files contain vulnerability-related knowledge. On wooyun, there was a related article. lfi with phpinfo was first proposed by Daniel

Use XSLT to continue cracking XML 0x00 Introduction XSL First, we should say that this XSLT should be broken: XSL-T. XSL refers to the EXtensible Stylesheet Language, which is directly translated into the extended style sheet Language. This language

How to Set HTTPS policies for old browsers A few days ago, a friend asked me: we all said we recommend using the Qualys SSL Labs tool to test SSL security. Why are some of the most powerful Security manufacturers having low scores? I think this

Dongle DOS/injection bypass (can cause a large number of website DoS attacks) 1. Dos A version of dongle does not properly handle parameters, resulting in website 503 Denial of Service. In addition, this version should be very common. A total of 15