Cloud Security

No Password Attack required for Microsoft SQL Server In a recent penetration test, some unencrypted Microsoft SQL Server (MSSQL) traffic was found in some of the packets we captured. At first, we thought that we could sniff the authentication

Two Memcached DDoS attacks PoC released Memcached DDoS attack-a few days after the world's largest DDoS attack reaches 1.7Tbps, two PoC codes for Memcached amplification attacks were published. The vulnerability behind Memcached DDoS attacks is

CODESYS WebVisu has a severe vulnerability that affects more than 100 ICS systems. According to Securitweek, Zhu Wenzhe of Istury IOT found that the Web server component used by CODESYS WebVisu of 3S-Smart Software Solutions has the stack-based

Remote Microsoft Office DLL (MS15-132) Hijacking through a browser A few weeks ago, the security researcher Parvez Anwar posted a large number of Microsoft Office DLL hijacking vulnerabilities on his personal Twitter [1]. A few weeks later,

Cisco WebEx Meeting Center GET Parameter Vulnerability (CVE-2015-4208)Cisco WebEx Meeting Center GET Parameter Vulnerability (CVE-2015-4208) Release date:Updated on:Affected Systems: Cisco WebEx Meeting Center Description: CVE (CAN) ID: CVE-201

ZTE mobile assistant Local Elevation of Privilege and authentication mechanism for WIFI Remote Management bypass (detailed Android analysis process and ideas) There are two vulnerabilities:(1) components exposed, resulting in Local Elevation of

IBM WebSphere Application Server Privilege Escalation Vulnerability (CVE-2015-1885)IBM WebSphere Application Server Privilege Escalation Vulnerability (CVE-2015-1885) Release date:Updated on:Affected Systems: IBM Websphere Application Server IBM

Release date:Updated on: Affected Systems:IBM WebSphere MQ 7.xDescription:--------------------------------------------------------------------------------Bugtraq id: 56471 IBM WebSphere MQ is used to provide message transmission services in

Release date:Updated on: 2013-06-27 Affected Systems:Cisco Next-Generation FirewallDescription:--------------------------------------------------------------------------------CVE (CAN) ID: CVE-2013-3382 Cisco ASA Next-Generation Firewall is a

Release date:Updated on: Affected Systems:IBM DB2 Connect 9.xDescription:--------------------------------------------------------------------------------Bugtraq id: 67617CVE (CAN) ID: CVE-2014-0907 IBM DB2 is a large commercial relational database

Quickly locate and attack the SQL Server in the domainDirectly locates and attacks the SQL Server in the domain without scanning Share a novel PowerShell script. Instead of scanning, it uses the sps-service Principal Name in the Active Directory to

  Manual implementation usually refers to the use of some hacker tools to scan and sniff the network, obtain the management account and related passwords, and install trojans on the network to further steal confidential files. The attack and

  [Directory] I. background and description 2. What is Cloud 3. What is cloud security? 4. How to Design cloud security 5. An authorized security evaluation test for SAE   I. background and description   Due to slow access to foreign servers and

How to deal with Android shutdown and hijacking of malware? At the beginning of the new year, a piece of news came out in the security industry: A new Android malware is determined to steal all your secrets and identities, write down your every

1. Common DDos attack types SYN Flood: it is currently the most popular DoS (DoS attacks) and is a type of TCP connection request that uses TCP protocol defects to send a large number of forged TCP connection requests, so that the attacked party's

The huge market demand will inevitably lead to a large number of excellent products. The three well-known anti-virus security vendors rising, Kingsoft and Jiangmin are outstanding representatives of many anti-virus software products in China.

As the network speed keeps getting faster and the trojan virus increases, we are overwhelmed and struggling. If we don't have anti-virus software, it's really hard to do. Many netizens are asking what anti-virus software and firewall can be

Comments: For a long time, MD5 encryption and verification are very secure. Many forums and software Save the password of the user name after MD5 encryption. Compared with the previous plaintext storage, the stored information after MD5 encryption

How to exploit the stored XSS vulnerability of SAP Afaria In the MDM Mobile Terminal Management System   Here, we will demonstrate how to analyze vulnerabilities in SAP Afaria, a world-renowned MDM mobile terminal management software, and how

Internet has become an important channel for people to and communicate with each other. Combining embedded systems with the Internet, connecting embedded devices to the Internet is the development trend of embedded applications