Cloud Security

ARM mbed TLS Heap Buffer Overflow Vulnerability (CVE-2015-8036)ARM mbed TLS Heap Buffer Overflow Vulnerability (CVE-2015-8036) Release date:Updated on:Affected Systems: ARM mbed TLS 2. x-2.1.2ARM mbed TLS 1.3.x-1.3.14 Description: CVE (CAN) ID:

MIT krb5 Denial of Service Vulnerability (CVE-2014-5355)MIT krb5 Denial of Service Vulnerability (CVE-2014-5355) Release date:Updated on:Affected Systems: MIT Kerberos 5 Description: CVE (CAN) ID: CVE-2014-5355Kerberos is a widely used

Cisco ASR 5000 Denial of Service Vulnerability (CVE-2015-0712)Cisco ASR 5000 Denial of Service Vulnerability (CVE-2015-0712) Release date:Updated on:Affected Systems: Cisco ASR 5000 Description: Bugtraq id: 74407CVE (CAN) ID: CVE-2015-0712The

Glibc gethostbyname Buffer Overflow Vulnerability (CVE-2015-0235) Release date:Updated on: Affected Systems:GNU glibcUnaffected system:The GNU glibc 2.18Description:Bugtraq id: 72325CVE (CAN) ID: CVE-2015-0235 Glibc is the libc library released by

Multiple security vulnerabilities in VLC Media Player Release date:Updated on: Affected Systems:VideoLAN VLC Media Player 2.1.5Description:Bugtraq id: 72252 VLC Media Player is a multimedia Player. VLC media player 2.1.5 and other versions have

Android Hacking Part 12: reinforce Shared Preferences with a third-party library In the previous few issues, we introduced the implementation of Shared Preference during Android Application Development, and demonstrated how to steal Shared

WordPress 'comment' field HTML Injection Vulnerability Release date:Updated on: Affected Systems:WordPressDescription:Bugtraq id: 71237 WordPress is a blog platform developed in PHP. you can build your own website on servers that support PHP and

The UC Browser IOS environment can remotely steal internal private files (such as cookies) or UXSS Test on the latest iOS 7.x version (if iOS 8 is not considered for the time being) without jailbreak. UC Browser will receive files uploaded by

Powershell tricks: Powershell Remoting0x01 Introduction Powershell Remoting is built on the windows WinRM service, which can be one-to-one or one-to-many remote control, or an HTTP or HTTPS "listeners" that uses the WS-MAM protocol to receive

EllisLab ExpressionEngine Core Multiple SQL Injection Vulnerabilities (CVE-2014-5387) Release date:Updated on: Affected Systems:EllisLab ExpressionEngine Core EllisLab ExpressionEngine CoreDescription:Bugtraq id: 70875CVE (CAN) ID:

IOS security vulnerabilities allow attackers to replace installed Legal applications with malicious applications Security company FireEye warned on its official blog that a security vulnerability on iOS devices allows attackers to replace installed

Multiple Denial of Service Vulnerabilities in TP-LINK TL-WR741N/TL-WR741ND Routers Release date:Updated on: Affected Systems:TP-LINK TL-WR741NTP-LINK TL-WR741NDDescription:------------------------------------------------------------------------------

Virus Trojan scan: Reverse Analysis of pandatv incense (Part 2)I. Preface This time, we will continue to analyze the virus in the previous article. The analysis may encounter some different situations. After all, we only need to step down the

Virus Trojan scan: Behavior Analysis of pandatv burningI. Preface To analyze the behavior of the pandatv virus, we use Process Monitor v3.10. Behavior Analysis Aims To write virus killing programs. Of course, due to various restrictions in the real

0x00 iptables Introduction The package filtering function of linux is the linux firewall, which consists of netfilter and iptables. The netfilter component, also known as the kernel space, is a part of the kernel. It consists of information packet

Decryption keys can be obtained without the need to control computers using edge channel attacks Not long ago, precision equipment was required for strictly isolated computers to obtain information. In my own column "strictly isolated computers are

Elevator recruitment network 0.2 million resume leakage (ID card, phone number, name, address)POST or ureg.html HTTP/1.1 Host: **.**.**.** Content-Length: 225 Content-Type: application/x-www-form-urlencoded X-Requested-With: XMLHttpRequest

Mainstream Web template Security Vulnerabilities cause sandbox to be broken by malicious users Escape: unlike Andy Dufresne, we do not want to let real malicious people out of control. Security researchers warned that a new type of high-risk

SQL Injection on a site of Shanda game may cause leakage of the IP addresses and mobile phone numbers of current database users Shanda game was injected again, and its permissions were not high enough to query its own tables. You can see the IP

ElasticSearch exposes the Local Arbitrary File Read vulnerability, affecting all versions earlier than 1.4.5 and 1.5.2. Recently, exploit-db has revealed the Local Arbitrary File Read vulnerability caused by Path Transversal, which affects all