Cloud Security

SQLite sqlite3VdbeExec Function DoS VulnerabilitySQLite sqlite3VdbeExec Function DoS Vulnerability Release date:Updated on:Affected Systems: SQLite Description: CVE (CAN) ID: CVE-2015-3415SQLite is an embedded database.In versions earlier

HP TippingPoint SMS and vSMS JBoss RMI Remote Code Execution VulnerabilityHP TippingPoint SMS and vSMS JBoss RMI Remote Code Execution Vulnerability Release date:Updated on:Affected Systems: HP TippingPoint SMS HP TippingPoint SMS Description:

Stuxnet's low-level bug causes accidental exposure. At the RSA 2015 Conference, security researchers said a low-level bug of the Stuxnet worm caused it to be unexpectedly exposed. The Stuxnet worm was designed to disrupt the Iran nuclear plant's

Remote buffer overflow vulnerability in PPP 'rc _ mksid () 'functionRemote buffer overflow vulnerability in PPP 'rc _ mksid () 'function Release date:Updated on:Affected Systems: Linux pppd Description: Bugtraq id: 74163CVE (CAN) ID: CVE-2015-3

Oracle Solaris local vulnerability (CVE-2015-0471)Oracle Solaris local vulnerability (CVE-2015-0471) Release date:Updated on:Affected Systems: Oracle Solaris 11.2Oracle Solaris 10 Description: Bugtraq id: 74138CVE (CAN) ID:

Learning Android Application Security Testing (Part4) from scratch) In this section, we will introduce a tool for analyzing Android applications. We have mentioned it in the previous section, and it is Drozer.Drozer is a security testing framework

HP multiple Elevation of Privilege vulnerabilities (CVE-2015-2112)HP multiple Elevation of Privilege vulnerabilities (CVE-2015-2112) Release date:Updated on:Affected Systems: HP Thin Client t820 Flexible Thin ClientHP Thin Client t620 Flexible

Improper 21CN configuration can be controlled by the certificate, resulting in man-in-the-middle attacks Improper 21CN configuration can be attacked by man-in-the-middle. Http://www.21cn.com Simply put, 21CN personal mailbox (http://hermes.mail.21cn.

Information Security career guidance courses As a goddess, I refused to write soft texts at the beginning. After all, I don't know whether or not you love me after writing this soft article? But in the face of a rough man and an infinite suggestion,

See how Level 3 and Cisco work together to remove botnets-SSH mental illness To maintain network security, you must not only identify threats, but also find effective methods to eliminate them from the network. Recently, Level3, the world's largest

Shell script programming (merge and sort)[Cpp] view plaincopy #! /Bin/bash # Shell script sorting: merging and sorting A = (13579) B = (2468101214) C = N = 5 M = 7 I = 0 J = 0 K = 0 While [$ I-lt $ n-a $ j-lt $ m]; do Iftest $ {a [$ I]

PermAd Analysis Report Recently, the AVL mobile security team found a POPBIRD game application in the GooglePlay application market (which is now dismounted). Once installed, the app immediately pops up with three lively and cute bird icons, quickly

Malicious Code Analysis System Self-protection mechanism bypass causes binary Leakage The fireeye malicious code analysis system is a malicious code analysis tool released by Kingsoft on the Internet. You can register an account and submit

Interesting Password Encryption Policy. Do you know how your password is stored on your website?In the early days of hash encryption, the system may directly store the user's plaintext password, and the password will be saved for what it is, and

No backdoor found: the open-source encryption software TrueCrypt security audit is complete TrueCrypt is a popular open-source file encryption software, which includes a large number of "sensitive people" (such as businessmen, politicians,

A critical system vulnerability in UFIDA Successful intrusion through an obsolete system and leakage of most of the source codeFirst, the system has a weak password http://vip.ufida.com.cn/nccsm/HomePage.aspxtest1 123456 there are a large number of

Command Execution + getshell (leakage of name, phone number, ID card number, bank card number, etc) The system address is: Http://www.jsbbzy.com/manage/basepage/login_init.action  St2 vulnerability + getshell:  Command Execution:  Upload

WordPress slide plug-in RevSlider vulnerability Exploitation Arbitrary read: /Wp-admin/admin-ajax.php? Action = revslider_show_image & img = ../wp-config.php Arbitrary upload: #!/usr/bin/perl## Title: Slider Revolution/Showbiz Pro shell upload

Murder Case 2 caused by Guangdong building Vulnerability (getshell information leakage of hundreds of users nationwide) You can upload any file in the background using getshell. Add a link to upload the problem file and upload a sentence directly. 

Attackers can bypass the abnormal graph to test China Mobile's Internet pass brute force cracking and credential stuffing. The mobile Internet pass allows you to log on to multiple business systems and is a unified authentication account. It is