Cloud Security

Android certificate trust Problems and big cousin0x00 cause 1. Recent major hijacking of icloud.com, yahoo.com, and apple.com2. wooyun platform and CVE all receive a large number of vulnerabilities related to the Android APP's trust in all

From scratch-micro-shot APP Vulnerability Micro-camera is the most popular mobile video social APP on the mobile Internet. It has unique video effects such as skin whitening and skin whitening, the list of social and photography apps in APP stores

Juniper Junos Remote Denial of Service Vulnerability (CVE-2014-6385) Release date:Updated on: Affected Systems:Juniper Networks JUNOSDescription:Bugtraq id: 72072CVE (CAN) ID: CVE-2014-6385 JunosE is an operating system used in the e-series

Etiko CMS index. php Cross-Site Scripting Vulnerability Release date:Updated on: Affected Systems:Etiko CMSDescription:CVE (CAN) ID: CVE-2014-8505 Etiko CMS is a content management system. The Etiko CMS does not validate the index. A cross-site

IOS security vulnerabilities allow attackers to replace installed Legal applications with malicious applications Security company FireEye warned on its official blog that a security vulnerability on iOS devices allows attackers to replace installed

Apache Derby security function Bypass Vulnerability and Denial of Service Vulnerability Released on: 2014-09-04Updated on: 2014-09-05 Affected Systems:Apache Group Derby Description:------------------------------------------------------------------

Multiple security vulnerabilities in Portech MV-372 VoIP Gateway Release date:Updated on: Affected Systems:PORTech MV-372Description:--------------------------------------------------------------------------------Bugtraq id: 48560 The MV-372 is a

BlackCat CMS 'cattranslate. php' Cross-Site Scripting Vulnerability Released on: 2014-09-03Updated on: 2014-09-04 Affected Systems:BlackCat CMS 1.0.3BlackCat CMSDescription:-----------------------------------------------------------------------------

WordPress wpSS plugin 'ss _ handler. php' SQL Injection Vulnerability Release date:Updated on: Affected Systems:WordPress wpSSDescription:--------------------------------------------------------------------------------Bugtraq id: 69089 WpSS is the

Remote Arbitrary Code Execution Vulnerability (CVE-2014-3518) for multiple Red Hat JBoss Products) Release date:Updated on: Affected Systems:RedHat JBoss Enterprise Application PlatformDescription:-----------------------------------------------------

Linksys WRT110 Cross-Site Request Forgery and Command Injection Vulnerability Release date:Updated on: 2013-07-16 Affected Systems:Linksys WRT110Description:--------------------------------------------------------------------------------Bugtraq id:

How to lock the door to "Cloud" Storage Recently, Hollywood experienced the most serious "****" storm in the history of the entertainment industry. The 101 Hollywood actresses, including Oscar-winning Jennifer Lawrence, well-known singers bud Haina,

Virus Trojan scan: SummaryI. Preface The following are some of the knowledge points I have summarized in the analysis of these articles, which are divided into two aspects: static analysis and dynamic analysis. I have added some extended knowledge,

Misunderstanding of Personal Computer Security: virus found in Cache Virus found in Cache Like no virus in CMOS, There is no virus in Cache. We know that the data stream is transmitted as follows during program execution: External Storage

Inventory: Four application scenarios of full disk encryption technology In this article, expert Karen Scarfone focuses on the advantages of FDE and its application scenarios to help enterprises determine whether this storage encryption technology

A Cross-Site XSS vulnerability in Baidu can bypass chrome filter Protection It can be used as a chrome filter Bypass case, so let's talk about it. Today, I opened the Baidu homepage and found that I could draw a lottery. So I clicked in and looked

Yonyou CRM Injection Vulnerability (No Logon is required to kill all versions) A system injection vulnerability in UFIDA allows you to kill all versions without logon. Yonyou TurboCRM has common SQL injection.Http://crm.varsal.com.cn: 8081/login.

A person's martial arts: analysis of the general idea of penetration testing (1) Preface Penetration Testing is both a technology and an art. This technology (ART) was not made by everyone at the beginning. It is said that no one will walk at birth,

Login box of the strong intelligence educational administration system SQL Injection File: \ logs GL \ logincheck. asp\ Shortxs \ LoginCheck. asp\ Login admin \ LoginCheck. asp  Multiple login boxes are injected. Here I only paste the code of the

[Anti-spoofing art]: the essence of security threatsToday, the new anti-spoofing art by Kevin Mitnick, a big hacker, finally arrived. If he hadn't read a book for a long time, he quickly decided to read the book well, this article serves as the