Cloud Security

OpenSSL cross-Protocol Attack Vulnerability (CVE-2016-0800)OpenSSL cross-Protocol Attack Vulnerability (CVE-2016-0800) Release date:Updated on:Affected Systems: OpenSSL Project OpenSSL OpenSSL Project OpenSSL Unaffected system: OpenSSL Project

Adobe BlazeDS SSRF Vulnerability (CVE-2015-5255)Adobe BlazeDS SSRF Vulnerability (CVE-2015-5255) Release date:Updated on:Affected Systems: Adobe ColdFusion Adobe ColdFusion Adobe LiveCycle Data Services 4.7.x-4.7.0.354178Adobe LiveCycle Data

Proftpd v1.3.5a Heap Overflow VulnerabilityProftpd v1.3.5a Heap Overflow Vulnerability Release date:Updated on:Affected Systems: ProFTPD Project ProFTPD 1.3.5a Description: ProFTPD is an FTP server program on Unix or Unix-like platforms (such

Foxit Reader form out-of-range read Remote Code Execution VulnerabilityFoxit Reader form out-of-range read Remote Code Execution Vulnerability Release date:Updated on:Affected Systems: Foxit Reader Description: Foxit Reader is a small PDF

Oracle Java SE/JavaFX Remote Vulnerabilities (CVE-2015-4916)Oracle Java SE/JavaFX Remote Vulnerabilities (CVE-2015-4916) Release date:Updated on:Affected Systems: Oracle Java SE 8u60Oracle Java FX 2.2.85 Description: CVE (CAN) ID: CVE-2015-4916

VLC Media Player 'src/network/httpd. c' Cross-Site Scripting VulnerabilityVLC Media Player 'src/network/httpd. c' Cross-Site Scripting Vulnerability Release date:Updated on:Affected Systems: VideoLAN VLC Media Player Description: Bugtraq id:

Multiple IBM DB2 product Denial of Service Vulnerability (CVE-2015-0157)Multiple IBM DB2 product Denial of Service Vulnerability (CVE-2015-0157) Release date:Updated on:Affected Systems: IBM DB2 9.8-FP5IBM DB2 9.7-FP10IBM DB2 10.5-FP5IBM DB2

IBM InfoSphere DataStage Arbitrary Code Execution Vulnerability (CVE-2015-1900)IBM InfoSphere DataStage Arbitrary Code Execution Vulnerability (CVE-2015-1900) Release date:Updated on:Affected Systems: IBM InfoSphere DataStage 9.1IBM InfoSphere

Adobe Photoshop CC/Bridge CC Integer Overflow (CVE-2015-3110)Adobe Photoshop CC/Bridge CC Integer Overflow (CVE-2015-3110) Release date:Updated on:Affected Systems: Adobe Photoshop CC Adobe Photoshop CC Description: Bugtraq id: 75243CVE (CAN)

HP LoadRunner Remote Buffer Overflow Vulnerability (CVE-2015-2110)HP LoadRunner Remote Buffer Overflow Vulnerability (CVE-2015-2110) Release date:Updated on:Affected Systems: HP LoadRunner 11.52 Description: Bugtraq id: 74737CVE (CAN) ID: CVE-2

Wireshark Android Logcat File parser Remote Denial of Service VulnerabilityWireshark Android Logcat File parser Remote Denial of Service Vulnerability Release date:Updated on:Affected Systems: Wireshark 1.12.0-1.12.4 Description: Bugtraq id: 74

Use drones or vacuum cleaners to black out enterprise wireless printers     A drone and a smartphone can intercept data transmitted by wireless printers outside the office building, as demonstrated by a group of iTrust researchers. In addition, the

The Locky ransomware analyzes the email transmission process.     Locky is a new type of ransomware spread through spam, which features similar to Dridex Trojans. Locky can bypass anti-spam filters (except for other items) and use social

How to Use XSLT to continue cracking XML 0x00 Introduction XSL First, we should say that this XSLT should be broken: XSL-T. XSL refers to the EXtensible Stylesheet Language, which is directly translated into the extended style sheet Language. This

Foxit Reader ConvertToPDF Heap Buffer Overflow Remote Code Execution Vulnerability Affected Systems: Foxit Reader Description: Foxit Reader is a small PDF document viewer and print program.The ConvertToPDF_x86.dll of Foxit Reader has a

Embedded-WINKHUB edge channel attack (NAND Glitch)0x00 Preface With the rapid development of IOT, research on the security of various embedded devices and routers is becoming increasingly popular. however, unlike previous software-only security

Technical analysis: How can attackers use blind injection of system commands to achieve "database theft? In the penetration test or CTF challenge, you may encounter an application that requires the user to input text information, the application

Lenovo employee information leakage vulnerability in shengxin sunshine Consulting Company The login system customized by shengxin sunshine consulting company for Lenovo has design defects, which can leak information of all Lenovo employees. (1)

XML-RPC amplification attack: "Violent aesthetics" against WordPress" Brute force cracking attacks are one of the oldest and most common attacks we have seen on the Internet so far. Hackers can use SSH and FTP protocols to crack your WEB

Trilogy of illegal Terminal Access Control: control, query, and guide I. Question proposal:Intruders want to bypass network boundary measures and directly intrude into the network through two channels: first, internal hosts "actively" create new