Cloud Security

GitHub suffered a maximum of 1.35 Tbps DDoS attacks in history Github, the largest code distribution platform, suffered a series of large-scale distributed denial of service (DDoS) attacks on Wednesday. In the first phase of the attack, Github's

Adobe Flash Player reuse Remote Code Execution Vulnerability after release (CVE-2018-4877) Adobe Flash Player reuse Remote Code Execution Vulnerability after release (CVE-2018-4877) Release date:Updated on: Affected Systems:Adobe Flash Player

NetGain Systems Enterprise Manager Remote Code Execution Vulnerability in CVE-2017-16608)NetGain Systems Enterprise Manager Remote Code Execution Vulnerability in CVE-2017-16608) Release date:Updated on:Affected Systems: NetGain Systems Enterprise

Use the fdisk and fallocate commands to create swap partitions Swap partitions are used to keep the content in the memory when the physical memory (RAM) is filled up. When RAM is exhausted, Linux will move the pages that are not active in the

Apache Jetspeed access restriction Security Vulnerability (CVE-2016-2171)Apache Jetspeed access restriction Security Vulnerability (CVE-2016-2171) Release date:Updated on:Affected Systems: Apache Group Jetspeed Description: CVE (CAN) ID: CVE-2

OpenSSL BIO _ * printf function Memory Corruption Vulnerability (CVE-2016-0799)OpenSSL BIO _ * printf function Memory Corruption Vulnerability (CVE-2016-0799) Release date:Updated on:Affected Systems: OpenSSL Project OpenSSL OpenSSL Project OpenSSL

Multiple Memory Corruption Vulnerabilities in Kaspersky AntivirusMultiple Memory Corruption Vulnerabilities in Kaspersky Antivirus Release date:Updated on:Affected Systems: Kaspersky Labs Kaspersky Antivirus Description: Bugtraq id:

One week PowerShell script Day 2: UDP interactive PowerShell script Welcome to the second day of the week's PowerShell script. Today I will introduce the interactive PowerShell script using UDP. I like UDP, because many security teams and vendors

Huawei P8 GPU driver DoS Vulnerability (with test code) Multiple Huawei P8 mobile phones use arm mali gpu. This chip driver has a Denial-of-Service vulnerability. Attackers with any permission can exploit this vulnerability to crash the mobile

Getshell + two SQL injections at the front-end of the p2p online lending system (ignore any defense and no logon required) The demo has a dongle.Looking at the official website descriptions, it is still quite cool.Http://www.shangdaixitong.com/index.

Remote code execution on the WifiCredService of the Samsung Android 5.0 Device 0x00 Abstract This vulnerability was discovered by Google Project Zero and Quarkslab several months ago and was recently disclosed. This vulnerability can be triggered

EMC Isilon OneFS Privilege Escalation Vulnerability (CVE-2015-6848)EMC Isilon OneFS Privilege Escalation Vulnerability (CVE-2015-6848) Release date:Updated on:Affected Systems: EMC Isilon OneFS Description: CVE (CAN) ID: CVE-2015-6848EMC

PolarSSL Heap Buffer Overflow Vulnerability (CVE-2015-5291)PolarSSL Heap Buffer Overflow Vulnerability (CVE-2015-5291) Release date:Updated on:Affected Systems: PolarSSL 1. x-1.2.17 Description: CVE (CAN) ID: CVE-2015-5291PolarSSL (mbed TLS)

Common techniques for attacking Web ApplicationsTarget: servers and clients that use HTTP protocol, and Web applications running on servers. Attack base: HTTP is a common protocol mechanism. In Web applications, all the content of the HTTP request

Sogou browser vulnerabilities are backdoor every day after recruitment I heard that sogou's input method is quite good. 1. The latest version is 5.3.6.16631 (the previous vulnerability version is 5.2.5.15987), but the previous vulnerability has not

Cisco Firepower 9000 Series unauthenticated web Vulnerability (CVE-2015-4287)Cisco Firepower 9000 Series unauthenticated web Vulnerability (CVE-2015-4287) Release date:Updated on:Affected Systems: Cisco Firepower Description: CVE (CAN) ID: CVE-

Cisco IOS and ios xe Software Denial of Service Vulnerability (CVE-2015-0681)Cisco IOS and ios xe Software Denial of Service Vulnerability (CVE-2015-0681) Release date:Updated on:Affected Systems: Cisco IOS Description: Bugtraq id: 75995CVE

Principle of HTTP Evasions: Block Transmission bypasses the Firewall This is the third article in the HTTP Evasions series. The Transfer-Encoding field is used to block request packets to bypass the firewall. For example, you can bypass malicious

Conscience sponsor: willing to help Raspberry Pi install Backdoor programs Last Wednesday, the Raspberry Pi Foundation announced that it was willing to invest money to install a malware on its device.Information from emailRaspberry Pi was once

Vulnerabilities on major platforms of China wide meiyi vbox vendors Detailed description: WTI manages the platform SQL injection and weak passwords on the cloud platform, allowing you to control all vbox products online. A large number of ports are