Cloud Security

Kaspersky security software detects vulnerabilities that can be exploited Google's Project Zero security team published a blog saying that the Russian security company Kaspersky's anti-virus software has discovered multiple serious vulnerabilities,

Multiple Memory Corruption Vulnerabilities in Apple iOS and iTunesMultiple Memory Corruption Vulnerabilities in Apple iOS and iTunes Release date:Updated on:Affected Systems: Apple iTunes 〈　10.5.1Apple iOS 5.xApple iOS 4.xApple iOS 3.xApple iOS

Linux Kernel Local Security Restriction Bypass Vulnerability (CVE-2015-3212)Linux Kernel Local Security Restriction Bypass Vulnerability (CVE-2015-3212) Release date:Updated on:Affected Systems: Linux kernel Description: Bugtraq id: 76082CVE (

Emerson AMS Device Manager local SQL Injection Vulnerability (CVE-2015-1008)Emerson AMS Device Manager local SQL Injection Vulnerability (CVE-2015-1008) Release date:Updated on:Affected Systems: Emersonprocess AMS Device Manager Description:

Cisco Access Control Server File Inclusion Vulnerability (CVE-2015-0729)Cisco Access Control Server File Inclusion Vulnerability (CVE-2015-0729) Release date:Updated on:Affected Systems: Cisco Access Control Server Description: CVE (CAN) ID:

Lenovo System Update Local Elevation of Privilege (CVE-2015-2234)Lenovo System Update Local Elevation of Privilege (CVE-2015-2234) Release date:Updated on:Affected Systems: Lenovo System Update Description: CVE (CAN) ID: CVE-2015-2234Lenovo

Vulnerability Analysis and POC construction of MS15-035 EMF file processing MS15-035 is a vulnerability in Microsoft Graphics components that process enhanced primitive files (EMF) and may allow remote code execution.Through patch comparison, we can

HP Multiple Remote Code Execution Vulnerabilities (CVE-2015-2113)HP Multiple Remote Code Execution Vulnerabilities (CVE-2015-2113) Release date:Updated on:Affected Systems: HP Thin Client t820 Flexible Thin ClientHP Thin Client t620 Flexible Thin

Learning Android Application Security Testing from scratch (Part3)In this section, we will look at how to conduct attack tests on components in Android applications. Read the first two sections ( http://www.bkjia.com/Article/201504/388673.html ,

Baidu HD client remote command execution and Solution Remote Command Execution caused by malicious links accessed by Baidu HD Client Currently, the latest version of Baidu HD client (v1.3) is used in Android 4.2.2. There are still Webview objects

Siemens SIMATIC S7-1200 CPU open Redirection Vulnerability (CVE-2015-1048) Release date:Updated on: Affected Systems:Siemens SIMATIC S7-1200 CPU Description:Bugtraq id: 72282CVE (CAN) ID: CVE-2015-1048 The SIMATIC S7-1200 is a programmable

Analysis of vulnerabilities in Internet Explorer (CVE-2014-6350)0x00 Preface   This month, Microsoft fixed three sandbox bounce vulnerabilities in the IE enhanced protection mode, which were disclosed by me (the original author, the same below) in

DNS hijacking (solution for website cannot be opened) DNS is essential for us to access the Internet. Here we will first introduce the knowledge of DNS. DNS is short for Domain NameSystem. It consists of a parser and a Domain Name Server. A Domain

Summary by overseas security researchers: various methods to maintain Trojans for a long time   In this post, I will dig deeper into several common methods to maintain Trojans. Simply using the local resources of the infected Windows system, you can

0.1 million WordPress website collapse: the malicious software SoakSoak has arrived WoRdPress is a blog platform developed in PHP. You can set up your own blog and use WordPress as a content management system (CMS. WordPress security

Multi-Vulnerability Analysis of Kirby CMS Kirby CMS is an easy-to-use, easy-to-install and setup CMS system that uses file system storage without database support. Supports Markdown syntax, templates, and plug-ins.Vulnerability detailsTwo

Weaver's cloud Office Platform's arbitrary Password Reset Vulnerability (Official Account as an example) Https://passport.eteams.cn/password   Reset the password.Change username to any email address to reset it.Take the official website account

Samsung mobile phone Remote Code Execution Vulnerability Analysis SummaryRemote attackers can control network traffic, manipulate the keyboard update mechanism of Samsung mobile phones, and execute code using system user permissions on the target

Password Reset Vulnerability for any user on popular websites The password reset operation is not associated with a specific mobile phone number. As a result, the password of any registered mobile phone account can be reset.1. The returned results

A model web platform SQL injection vulnerability exposes more than 2500 model data and group data of multiple model companies. A model web platform SQL injection vulnerability exposes more than 2500 model data and group data of multiple model