Cloud Security

How to Use the peanut shell service for Intranet penetration At first, I was always synchronizing through cloud Disk Synchronization, or I was tired of playing Git and pull for synchronization. As a result, there is a strong demand for remote

Remaiten-a Linux bot targeting routers and IoT Devices ESET researchers are actively detecting Trojans targeted at embedded systems, including routers, gateways, and wireless access points. Recently, we have discovered a relevant bot, which

Adobe Flash Player post-release Reuse Vulnerability (CVE-2016-1013)Adobe Flash Player post-release Reuse Vulnerability (CVE-2016-1013) Release date:Updated on:Affected Systems: Adobe Flash Player Adobe Flash Player Adobe Flash Player Description:

Apache Ranger access Restriction Bypass Vulnerability (CVE-2015-0266)Apache Ranger access Restriction Bypass Vulnerability (CVE-2015-0266) Release date:Updated on:Affected Systems: Apache Group Ranger 0.5.x Description: Bugtraq id: 76221CVE

Apache OpenMeeting XSS Vulnerability (CVE-2016-2163)Apache OpenMeeting XSS Vulnerability (CVE-2016-2163) Release date:Updated on:Affected Systems: Apache Group OpenMeetings Description: CVE (CAN) ID: CVE-2016-2163Apache OpenMeetings is an

Apache Jetspeed XSS Vulnerability (CVE-2016-0712)Apache Jetspeed XSS Vulnerability (CVE-2016-0712) Release date:Updated on:Affected Systems: Apache Group Jetspeed Description: CVE (CAN) ID: CVE-2016-0712Jetspeed is an open portal platform and

Another Stagefright vulnerability was fixed in April Security Update of Android. Android's monthly security updates are not uncommon now, but the coming version of April is very important to solve. According to reports, Google fixed a total of

HPE Asset Manager Arbitrary Code Execution Vulnerability (CVE-2016-2000)HPE Asset Manager Arbitrary Code Execution Vulnerability (CVE-2016-2000) Release date:Updated on:Affected Systems: HP AssetManager 9.50HP AssetManager 9.41HP AssetManager

Huawei Sophia-L10 DoS Vulnerability (CVE-2015-8305)Huawei Sophia-L10 DoS Vulnerability (CVE-2015-8305) Release date:Updated on:Affected Systems: Huawei Sophia-L10 P7-L10C900B852 Description: CVE (CAN) ID: CVE-2015-8305Huawei Sophia-L10 is a

Cisco TelePresence Server Denial of Service Vulnerability (CVE-2015-6313)Cisco TelePresence Server Denial of Service Vulnerability (CVE-2015-6313) Release date:Updated on:Affected Systems: Cisco TelePresence Server 4.1 (2.29)-4.2 (4.17)

Ca api Gateway CRLF Injection Vulnerability (CVE-2016-3118)Ca api Gateway CRLF Injection Vulnerability (CVE-2016-3118) Release date:Updated on:Affected Systems: Ca api Gateway 8.4 Ca api Gateway 8.0 Ca api Gateway 7.1 Description: CVE (CAN)

Linux Remaiten malware is stepping up deployment of Iot device botnets     Researchers at the ESET security company found a malware targeted at Iot devices such as routers, gateways, and wireless access points."Bot backdoor" and "scanner" crossbred

ESET researchers found that Linux Remaiten malware is deploying Iot device botnets     Researchers at the ESET security company found a malware targeted at Iot devices such as routers, gateways, and wireless access points."Bot backdoor" and

Hacker Trojan history analysis Recently, the large-scale outbreak of the locky ransomware once again aroused the attention of hackers. National institutions, including the National Computer Virus emergency response center, have also issued reports

Hitting the Black Hat Asia Summit: drones cannot escape the ship     Without an encrypted professional drone, Wi-Fi is easily hooked up, and the signal is copied, And then it flies away ..... Warning drones cannot escape the ship. At the Black Hat

A city's China Resources gas SCADA system has commands that can be executed on the Intranet. Industrial Control Security: Command Execution of China Resources gas SCADA System in a city (GETSHELL leaks a large amount of information/controls a large

P2p financial security: SQL Injection in a website of yonglibao (with verification script) It is useless to filter single quotes. Http://m.yonglibao.com/Event/V3ReComment/inviteList? UserId = (select * from (select (sleep (5) x)Delayed Injection is

SQL injection vulnerability in an important IT168 site) An important website in IT168 has the SQL Injection Vulnerability (script attached) Http://wp.it168.com/plugin.php? Fid = & filter = 1 & id = waterfall: threads & loads = 1 & orderby = 1 & page

263 The communication substation can write two arbitrary files to Getshell. 263 communication any file in a substation is written into Getshell 263 write arbitrary files at two sites to GetshellHttp: // 211.157.162.253/Cacti installed the weathermap

Open public network plc equipment-a new type of backdoor Analysis 0x00 Introduction This article is mainly from the essential components of the industrial control network PLC (Programmable Controller), clarified the implementation of a new type of