Cloud Security

The Bastille research team discovered an attack on the Bluetooth keyboard and mouse. 0x00 Preface Recently, the Bastille team discovered an attack targeting the Bluetooth keyboard and mouse. Attackers can exploit this vulnerability to control

Adobe Reader DC Remote Code Execution Vulnerability (CVE-2016-1009) (apsb16-09)Adobe Reader DC Remote Code Execution Vulnerability (CVE-2016-1009) (apsb16-09) Release date:Updated on:Affected Systems: Adobe Reader DC Adobe Reader DC Adobe Reader

More than 10 million websites using https are threatened by new decryption attacks A low-cost DROWN attack can decrypt data within several hours. This attack also works for email servers using TLS. An international research group issued a

Wireshark X.509AF parser DoS Vulnerability (CVE-2016-2524)Wireshark X.509AF parser DoS Vulnerability (CVE-2016-2524) Release date:Updated on:Affected Systems: Wireshark 2.0.x Description: CVE (CAN) ID: CVE-2016-2524Wireshark is the most

PhpMyAdmin suggestPassword Function Vulnerability (CVE-2016-1927)PhpMyAdmin suggestPassword Function Vulnerability (CVE-2016-1927) Release date:Updated on:Affected Systems: phpMyAdmin phpMyAdmin 4.5.4 > 4.5.xphpMyAdmin phpMyAdmin 4.4.15.3 >

Google Chrome post-release Reuse Vulnerability (CVE-2016-1641)Google Chrome post-release Reuse Vulnerability (CVE-2016-1641) Release date:Updated on:Affected Systems: Google Chrome Description: CVE (CAN) ID: CVE-2016-1641Google Chrome is a

Security researchers have successfully designed a new attack method to steal keys from Android and iOS Mobile Phones. Existing security researchers have successfully designed an attack method to obtain encryption keys, Apple Pay accounts, and other

Careful Introduction: How can companies stop malware while cloud computing is in the process     Data indicates that four of every 100 files stored in cloud applications contain malware.HR: Be careful when introducing the wolf Assume that you are an

How to find specific strings in a malicious sample   It is useful to search for specific strings in a malicious sample. For example, you may find malicious samples with similar code for different targets. This article will describe this point in

Hacking Team's Technical Analysis on Mac malware code Last week, security personnel Patrick Wardle published an article about HackingTeam's new backdoor and virus implants. It also indicates that the Hacking Team becomes active again, bringing new

Getshell (involving vehicle insurance information) is caused by a weak password in weblogic backend at Port 8001 of a Bank of China Insurance auto insurance system) Rt **. **: 8001/Bank of China Insurance same-segment auto insurance system**.**.**.**

How can I meet FREE TALK in four or nine cities? Beijing site issue collection     Young people carry books in their stomachs, ambitions in their minds, Yang and the girl in their hearts, complete hardware and software, and fill them with

An SQL injection exists in a parameter of retao Network (involving multiple databases) ...   Http://guanli.letao.com/letaozu/articlelist.aspx? The parameter id = 1697id has been injected.     sqlmap identified the following injection points with a

ClickJacking Analysis for Web Security) ClickJacking is a visual deception. There are two methods. One is that an attacker uses a transparent iframe to overwrite a webpage and then induces the user to perform operations on the webpage, at this time,

Getshell + Privilege Escalation Analysis Today's military training, and then I had time to watch the station for a while at night. As a result, my buddy asked me to stay with him for a day. In fact, I spent the whole process with my girlfriend and

General system design defects in an insurance industry can be added, deleted, modified, and checked A general system design defect in an insurance industry can be directly operated on the database to obtain sensitive data (affecting a large number

A sub-station on Sina Weibo has SQL injection to be filtered SQL Injection exists in a substation on Sina Weibo URL: http://xueyuan.weibo.com/course/index? Categoryid = & orderby_fild = 3 & orderby_operate = desc & key_word = foreign t _ type = 0

Attackers can exploit the Axis2 default password security vulnerability to intrude into the WebService website. Recently, wooyun has followed several penetration tests using the Axis2 default password. The penetration ideas are basically the same,

Code audit-file unauthorized access and file upload and Search Skills0x01. Global Search overauthorization skills In code audit, when the file volume is large, you can find files that can be accessed without excessive permissions (taking PHP as an

A sub-station in Baidu has SQL injection that requires filtering or forced type conversion. A sub-station in Baidu has the SQL injection vulnerability. 1. vulnerability addressHttp://house.baidu.com/guilin/map/searchrect? City = guilin & minx = 999