Cloud Security

Google Chrome MIDI Subsystem Application Crash Vulnerabilities (CVE-2015-6792) Affected Systems: Google Chrome Description: CVE (CAN) ID: CVE-2015-6792Google Chrome is a Web browser tool developed by Google.In versions earlier than Google

In Windows 10, how does one hide the registry? Using Hook HHIVE: GetCellRoutine () to hide the registry is a public method for a long time. Although some Anti Rootkit tools cannot be bypassed, this method is very stable to use, windows XP-Windows 8.1

Oracle Password Storage and verification process analysis and defense suggestions Oracle is currently the largest database product in the market. Compared with other database products, it has the largest number of vulnerabilities among similar

Cyrus IMAP index_urlfetch Integer Overflow Vulnerability (CVE-2015-8078)Cyrus IMAP index_urlfetch Integer Overflow Vulnerability (CVE-2015-8078) Release date:Updated on:Affected Systems: Cyrus Cyrus IMAP Server 2.5.6Cyrus Cyrus IMAP Server

EMC Isilon OneFS Privilege Escalation Vulnerability (CVE-2015-6848)EMC Isilon OneFS Privilege Escalation Vulnerability (CVE-2015-6848) Release date:Updated on:Affected Systems: EMC Isilon OneFS Description: CVE (CAN) ID: CVE-2015-6848EMC

Mozilla Firefox information leakage (CVE-2015-7195)Mozilla Firefox information leakage (CVE-2015-7195) Release date:Updated on:Affected Systems: Mozilla Firefox Description: CVE (CAN) ID: CVE-2015-7195Mozilla Firefox is an open-source web

Yahoo! Messenger Stack Buffer Overflow Vulnerability (CVE-2014-7216)Yahoo! Messenger Stack Buffer Overflow Vulnerability (CVE-2014-7216) Release date:Updated on:Affected Systems: Yahoo! Messenger 11.5.0.228Yahoo! Messenger

Multiple security vulnerabilities in McAfee Application ControlMultiple security vulnerabilities in McAfee Application Control Release date:Updated on:Affected Systems: McAfee Application Control Description: Bugtraq id: 76062McAfee

SHELL script for collecting DELL server hardware information Recently, an asset list is required to collect the hardware information of the DELL server, including the following information: 1. Operating System Information (type, version, kernel,

Threat focus: CRYPTOWALL4 Continuously updated malwareOriginal article: http://blog.talosintel.com/2015/12/cryptowall-4.html 0x00 Abstract In the past year, Talos has spent a lot of time studying the operating principles of ransomware, managing

What have the white hat dug this year? Count the vulnerabilities that affect the world in 2015. 2015 is a year of cyber security: countless critical vulnerabilities are discovered, repaired, or exploited... Fortunately, with the efforts of White Hat

Firewall-based Easy VPN configuration process Objective: To enable a client on the remote Internet to access internal resources of the LAN through an encrypted tunnel by making Easy VPN on the gateway ASA firewall device.The following figure shows

Youku encrypted videos have multiple universal passwords that can bypass the restriction (odd flower vulnerability) Youku encrypted videos with multiple universal passwordsDetailed description: Enter two double quotation marks in the password box.

The patch for Mac keeper vulnerability is invalid and can still be bypassed for attacks. Recently, security expert Patrick Wardle said that the patch released by Apple to fix the Mac OS X keeper vulnerability is invalid and cannot protect the

Self-built CDN defends against DDoS attacks Self-built CDN to defend against DDoS attacks (1): Build a persistent defense line Preface This topic is the content we shared in the OWASP Hangzhou region security salon at the end of 2013. Here we

Java deserialization vulnerability in WebLogic implements binary file upload and Command Execution 0x00 Introduction Java deserialization vulnerability has been detected on famous servers such as WebLogic and JBoss for a long time. The breenmachine

Iot security: multiple security vulnerabilities in LED lights Recently, a foreign security expert found that Zengge's Wi-Fi LED lamp has multiple security vulnerabilities. ZENGGE is a high-tech company integrating LED Controller Product R & D,

Write a phishing page to get the website's OA system account I found the storage type XSS before, but found that the session is actually http-only. Well, the cooking skill is not enough and cannot be obtained.So I came up with this kind of damage...

Multi-Vulnerability Analysis of Kirby CMS Kirby CMS is an easy-to-use, easy-to-install and setup CMS system that uses file system storage without database support. Supports Markdown syntax, templates, and plug-ins.Vulnerability detailsTwo

Blackhat: Theory and Practice of WSUS vulnerability Exploitation Paul Stone and Alex Chapman proposed a Windows Server Update Service (WSUS) vulnerability in Blackhat2015. Attackers can exploit this vulnerability by using Man In The Middle (MITM) to