Cloud Security

Cyrus IMAP index_urlfetch Integer Overflow Vulnerability (CVE-2015-8078)Cyrus IMAP index_urlfetch Integer Overflow Vulnerability (CVE-2015-8078) Release date:Updated on:Affected Systems: Cyrus Cyrus IMAP Server 2.5.6Cyrus Cyrus IMAP Server

EMC Isilon OneFS Privilege Escalation Vulnerability (CVE-2015-6848)EMC Isilon OneFS Privilege Escalation Vulnerability (CVE-2015-6848) Release date:Updated on:Affected Systems: EMC Isilon OneFS Description: CVE (CAN) ID: CVE-2015-6848EMC

In the third quarter of 2015, 46% of DDoS attacks came from Linux computers. According to research reports from Kaspersky Labs and Imperva in the third quarter of this year, DDoS attacks have become a very frequent topic and even mask many more

Mozilla Firefox man-in-the-middle Security Restriction Bypass Vulnerability (CVE-2015-4483)Mozilla Firefox man-in-the-middle Security Restriction Bypass Vulnerability (CVE-2015-4483) Release date:Updated on:Affected Systems: Mozilla Firefox

Kaspersky security software detects vulnerabilities that can be exploited Google's Project Zero security team published a blog saying that the Russian security company Kaspersky's anti-virus software has discovered multiple serious vulnerabilities,

Yahoo! Messenger Stack Buffer Overflow Vulnerability (CVE-2014-7216)Yahoo! Messenger Stack Buffer Overflow Vulnerability (CVE-2014-7216) Release date:Updated on:Affected Systems: Yahoo! Messenger 11.5.0.228Yahoo! Messenger

Multiple security vulnerabilities in McAfee Application ControlMultiple security vulnerabilities in McAfee Application Control Release date:Updated on:Affected Systems: McAfee Application Control Description: Bugtraq id: 76062McAfee

Linux Kernel 'x86/entry/entry_64.S 'Local Security Restriction Bypass VulnerabilityLinux Kernel 'x86/entry/entry_64.S 'Local Security Restriction Bypass Vulnerability Release date:Updated on:Affected Systems: Linux kernel 3.3.5Linux kernel

Multiple IBM DB2 product Denial of Service Vulnerability (CVE-2015-0157)Multiple IBM DB2 product Denial of Service Vulnerability (CVE-2015-0157) Release date:Updated on:Affected Systems: IBM DB2 9.8-FP5IBM DB2 9.7-FP10IBM DB2 10.5-FP5IBM DB2

Cisco IOS and ios xe Software Denial of Service Vulnerability (CVE-2015-0681)Cisco IOS and ios xe Software Denial of Service Vulnerability (CVE-2015-0681) Release date:Updated on:Affected Systems: Cisco IOS Description: Bugtraq id: 75995CVE

OpenSSL will release security patches tomorrow to fix undisclosed 0-day high-risk Vulnerabilities OpenSSL officially issued a vulnerability warning, reminding the system administrator to prepare for OpenSSL upgrade. The latest version of OpenSSL

HP LoadRunner Remote Buffer Overflow Vulnerability (CVE-2015-2110)HP LoadRunner Remote Buffer Overflow Vulnerability (CVE-2015-2110) Release date:Updated on:Affected Systems: HP LoadRunner 11.52 Description: Bugtraq id: 74737CVE (CAN) ID: CVE-2

Estools assists in anti-obfuscation Javascript 0x00 Preface Javascript is a script language running on the client. Its source code is completely visible to users. But not every js developer wants their code to be directly read, such as the malware

SHELL script for collecting DELL server hardware information Recently, an asset list is required to collect the hardware information of the DELL server, including the following information: 1. Operating System Information (type, version, kernel,

Firewall-based Easy VPN configuration process Objective: To enable a client on the remote Internet to access internal resources of the LAN through an encrypted tunnel by making Easy VPN on the gateway ASA firewall device.The following figure shows

Hackers decrypt the Wi-Fi code within one minute and steal user information. The national Internet emergency center (CNCERT) warned last weekend that a variety of mainstream router products currently on the market have backdoors, which may be

Write a phishing page to get the website's OA system account I found the storage type XSS before, but found that the session is actually http-only. Well, the cooking skill is not enough and cannot be obtained.So I came up with this kind of damage...

Blackhat: Theory and Practice of WSUS vulnerability Exploitation Paul Stone and Alex Chapman proposed a Windows Server Update Service (WSUS) vulnerability in Blackhat2015. Attackers can exploit this vulnerability by using Man In The Middle (MITM) to

The background permissions of haotay's Internet access management system are bypassed (some hotels can view the user's complete information about the opening ID card, etc) I thought it was only owned by huacang, but after a brief investigation, I

Defcon Quals challenge 2015 -- Twentyfiveseventy level WriteUp   Not long ago, the Defcon Qualification ctf I attended was very interesting. I want to share with you the detail analysis of the longest level I used in this challenge. This level is