Cloud Security

Atlassian jira xss Vulnerability (CVE-2017-16864)Atlassian jira xss Vulnerability (CVE-2017-16864) Release date:Updated on:Affected Systems: Atlassian JIRA Atlassian JIRA Description: Bugtraq id: 102505CVE (CAN) ID: CVE-2017-16864JIRA is a

Cisco Nexus 3000/3500 switch default credential Vulnerability (CVE-2016-1329)Cisco Nexus 3000/3500 switch default credential Vulnerability (CVE-2016-1329) Release date:Updated on:Affected Systems: Cisco Nexus 3000 Series SwitchesCisco Nexus 3500

Methods for LAN wireless routers to limit network speed, wireless LAN traffic monitoring, and lan network speed monitoringAt present, many organizations use wireless routers to access the Internet. Although network access is convenient, the network

How to disable USB flash drives, disable USB storage devices, and prohibit USB flash drives from copying computer filesUSB flash drives and mobile hard disks are currently widely used USB storage tools, which greatly facilitates work. But at the

Cisco Web Security Appliance proxy Restriction Bypass Vulnerability (CVE-2016-1296)Cisco Web Security Appliance proxy Restriction Bypass Vulnerability (CVE-2016-1296) Release date:Updated on:Affected Systems: Cisco Web Security Appliance

MOF backdoor of Powershell 0x00 MOF Managed Object Format (MOF) is the original storage form of classes and class instances in the WMI database. For more information, see WMI attack, defense and forensic analysis, Windows Management specifications (

Symantec Endpoint Protection Manager/Client Local Denial of Service VulnerabilitySymantec Endpoint Protection Manager/Client Local Denial of Service Vulnerability Release date:Updated on:Affected Systems: Symantec Endpoint Protection Manager

Android DropBox SDK Vulnerability (CVE-2014-8889) Analysis0x00 Preface This article is a translation of the detailed analysis of DropBox SDK vulnerabilities by the ibm iss security team. Today, personal data is stored on the cloud, so that services

Apple Mac OS X Server Code Execution Vulnerability (CVE-2014-4394) Release date:Updated on: Affected Systems:Apple Mac OS X Description:Bugtraq id: 69891CVE (CAN) ID: CVE-2014-4394 OS x (formerly Mac OS X) is the latest version of Apple's

Adobe Reader and Acrobat Security Bypass Vulnerability (CVE-2014-0568) Release date:Updated on: Affected Systems:Adobe Reader 11.xAdobe Reader 10.xDescription:Bugtraq id: 69828CVE (CAN) ID: CVE-2014-0568 Adobe Reader (also known as Acrobat Reader)

SSH session hijacking for port forwarding During penetration testing, we sometimes encounter situations where we build a testing environment, product servers, DMZ, or other similar machine groups. In this case, we can regard them as a stepping stone.

No matter what operating system you are using, there are always some general suggestions for enhancing system security. If you want to reinforce your system to prevent unauthorized access and unfortunate disasters, the following preventive measures

As we all know, the biggest difference between Windows and Linux systems lies in its non-open-source nature. Therefore, in Windows, we transfer files and share resources through FTP, compared with the previous TFTP protocol, FTP provides necessary

The Linux operating system is stable, robust, efficient, and secure. Is becoming an ideal platform for various network services. Various network applications have superior performance applications in the Linux system, such as Apache servers

Wordpress is a PHP open-source free blog platform system with powerful functions and ease of use. It is favored by many bloggers and has become the most popular blog system for users. Although wordpress has done a good job in terms of security, we

Note: As the last article in this series, this article is first published on my BKJIA blog. This article puts forward some ideas and suggestions for the construction of the tax system security management platform. Refer:Article 1:Requirement

Windows 2000 automatically starts the DNS Client Service, which provides the Client name resolution and cache service. Your DNS query results are cached locally. When configuring a DNS server, if you do not have a good grasp of this principle, some

There are several obvious basic steps to protect computer security: Keep your computer updated with the latest operating systems and applications, and ensure that the latest anti-spyware and anti-virus software is installed, use a complex password

Attackers can exploit Padding Oracle attacks to obtain encryption keys. 0 × 00 Preface In this article, I would like to share some practical tips on using the padding oracle vulnerability. This type of vulnerability allows attackers to decrypt

Today, many email clients and services provide built-in anti-spam tools, such as Yahoo! Emails, Hotmail, and Microsoft Outlook 2003. In fact, the Built-in anti-spam functions of some products (especially Hotmail and Oddpost) seem to be no worse than