Cloud Security

Use showModalDialog to bypass IE's XSS Filtering Today, I want to share with you an article about Xss filtering that uses showModalDialog to bypass IE.The showModalDialog function has been in existence for many years. Although it is currently

Air travel gesture lock easily bypasses and other vulnerabilities and Solutions Security functions are not properly implemented. Test version: the latest version of the android client v2.5.51. In this version, you can set the gesture lock function

A perfect Bug (CVE-2015-3077): Using type obfuscation in Flash For some attackers, it is important that exp can be used stably. In other words, exp can cause code execution every time on a system running a specific flash version of a specific

Introduction to AAA (I) of Elasticsearch) 0x00 Preface Elasticsearch (Elasticsearch) has been widely used by more and more companies, and its own security problems have also attracted much attention. Recently, many security problems have emerged,

Siemens RuggedCom ROS and ROX mitm Information Leakage VulnerabilitySiemens RuggedCom ROS and ROX mitm Information Leakage Vulnerability Release date:Updated on:Affected Systems: Siemens RuggedCom ROS Description: Bugtraq id: 75982CVE (CAN)

TimeDoctor autoupdate Arbitrary Code Execution Vulnerability (CVE-2015-4674)TimeDoctor autoupdate Arbitrary Code Execution Vulnerability (CVE-2015-4674) Release date:Updated on:Affected Systems: TimeDoctor 1.4.72.3 Description: CVE (CAN) ID:

Linux Kernel 'x86/entry/entry_64.S 'Local permission Escalation VulnerabilityLinux Kernel 'x86/entry/entry_64.S 'Local permission Escalation Vulnerability Release date:Updated on:Affected Systems: Linux kernel 3.3.5Linux kernel 3.3.4Linux kernel 3.3.

Isc bind named Denial-of-Service Vulnerability (CVE-2015-5477)Isc bind named Denial-of-Service Vulnerability (CVE-2015-5477) Release date:Updated on:Affected Systems: Isc bind Isc bind Description: CVE (CAN) ID: CVE-2015-5477BIND is a widely

Dedicated to cybersecurity-anti-Black security guard EvaluationAnti-Black security guard is a security software independently developed by Anwei technology with the dual-engine detection and removal function. It can quickly and accurately identify

How to Prevent Trojan and virus attacksI. What are the symptoms of computer poisoning? People who are ill may have various symptoms. Similarly, computer viruses may have some toxic reactions. If your computer has the following symptoms, Use

Sadstrot Trojan Analysis Report The AVL mobile security team intercepted a malicious trojan that steals user QQ and accounts, friend lists, and message records, the subtrate hook framework is used to monitor any input information on the keyboard. In

Comparison of common database encryption technologies Abstract: As a database security technology that has emerged in recent years, database encryption has been paid more and more attention. This protection method based on storage layer encryption

IPSec VPN encrypted tunnel Based on ASA firewall As shown in the experiment environment, you can plan the IP address by yourself, and the ISP operator simulates the external internet. The procedure of configuration is as follows.First, configure

Multiple weak passwords in a station on the 19th floor (with test scripts) Multiple weak passwords in a station on the 19th floor (with test scripts) Vulnerability system http://blog.19ued.com/The WordPress blog system is used.Based on WP defects,

A mobile phone system in China causes SQL injection to leak a large number of databases URL: http://subadmin.cnmo.com First, the system will return the user does not exist and the password is wrong. So I started to use top500 to run the user name

Fragment Injection vulnerability Miscellaneous 13 years ago, IBM's security researchers discovered a Google framework layer vulnerability, Fragment injection, which can reset the Android mobile phone PIN code, you should be familiar with figure 1.

Php comparison operator security issues 0x00 comparison operator Php's comparison operators include = (equal to) loose comparison, = (completely equal to) strict comparison, which introduces many interesting questions. In loose comparisons, php

Zhengzhou Turing robot has insufficient OA permission to upload arbitrary files Http: // 116.255.252.25: 100. habitually Delete the port, access prompt logon timeout, please log on again, try a few weak passwords, login fails, a little confused,

Capture his greed-remember to take a website permission through a social engineering employee Target: xxxx.cn A medium-and large-sized site in China (more than 10000 online users per day)Preliminary detection process: The server is from iis. I

An unexpected 0-day tour I don't know if you pay attention to it, before Baidu cloud security X-TEAM written article "Technical Analysis: about Android libStagefright series Vulnerability Analysis", in fact, implies a natural 0 day. This "0 day" is