Cloud Security

IBM Security Key Lifecycle Manager Vulnerability (CVE-2017-1669)IBM Security Key Lifecycle Manager Vulnerability (CVE-2017-1669) Release date:Updated on:Affected Systems: IBM Tivoli Key Lifecycle Manager 2.7IBM Tivoli Key Lifecycle Manager 2.6IBM

Oracle Sun Systems Solaris Vulnerability (CVE-2016-3497)Oracle Sun Systems Solaris Vulnerability (CVE-2016-3497) Release date: 2016-08-02Updated on:Affected Systems: Oracle Sun Systems Products Suite 11.3 Description: CVE (CAN) ID: CVE-2016-349

LastPass exposed 0-day vulnerabilities, allowing accounts to be accessed by malicious websites Google Project Zero hacker Tavis Ormandy reported a high-risk 0-day vulnerability was found in the popular password management tool LastPass, allowing

Google Chrome post-release Reuse Vulnerability (CVE-2016-5136)Google Chrome post-release Reuse Vulnerability (CVE-2016-5136) Release date:Updated on:Affected Systems: Google Chrome Description: CVE (CAN) ID: CVE-2016-5136Google Chrome is a

WordPress customizer redirect Restriction Bypass Vulnerability (CVE-2016-5832)WordPress customizer redirect Restriction Bypass Vulnerability (CVE-2016-5832) Release date:Updated on:Affected Systems: WordPress Description: CVE (CAN) ID: CVE-201

Apple iBooks Author information leakage (CVE-2016-1789)Apple iBooks Author information leakage (CVE-2016-1789) Release date:Updated on:Affected Systems: Apple iBooks Author 2.4.1 Description: CVE (CAN) ID: CVE-2016-1789IBooks Author is an

OS X Update fixes the JavaScript link vulnerability in iMessage. At the end of last month, Apple fixed a major security vulnerability in iMessage. However, during the same round of software updates at that time, they also fixed another potential

Google Chrome Security Restriction Bypass Vulnerability (CVE-2016-1638)Google Chrome Security Restriction Bypass Vulnerability (CVE-2016-1638) Release date:Updated on:Affected Systems: Google Chrome Description: CVE (CAN) ID:

Privilege Escalation using the Use-After-Free (UAF) vulnerability in the Linux Kernel Last month, the CVE-2016-0728 Local Elevation of Privilege Vulnerability let everyone's eyes again focused on Linux kernel security. Like CVE-2015-3636, CVE-2015-73

Kaspersky found Triada, the most threatening Android Trojan so far Kaspersky Lab experts have detected the latest Android trojan named Triada, which is the most threatening mobile Trojan Detected so far.Triada: specializes in financial

Comments: All Internet cafes here use the pubwin EP 5.000000069 ***** (forgot leech_^) network management system, the operating system uses windows xp, And the restore wizard is installed. Different passwords are set for BIOS, system, recovery genie,

Comments: Target: crack the encrypted Asp Trojan login password. Because there is no version description in the Trojan, I do not know the name of the Trojan. Solution: Use the encrypted password to replace the password and use the ciphertext and

Severe Flash Vulnerability exposure: hackers can spread ransomware vulnerability repair Adobe urgently released a Flash patch to fix a serious security vulnerability in the early morning of January 1, April 9, Beijing time. This vulnerability may

Oracle Releases emergency Java security updates to fix a critical vulnerability Oracle has released an emergency Java security update that fixes a critical vulnerability (CVE-2016-0636, CNNVD-201603-377 ).Vulnerability OverviewOracle responds so

Website vulnerabilities no verification for specific sites vulnerabilities (weak passwords, SQL injection, and Arbitrary File Uploads) P2p financial security: website vulnerabilities in multiple locations (weak passwords, SQL injection, and

Foxit PhantomPDF WillClose: Reuse Remote Code Execution Vulnerability after release Affected Systems: Foxit Reader Description: Foxit Reader is a small PDF document viewer and print program.Foxit Reader's WillClose operation has a

Malware Reverse Analysis Series (1): identifies important code structures in assembly languages This series of articles are related to malware courses. Therefore, we should start with the complete structure of PE and ELF files. Another important

Constructing a drop-to-dl-resolve chain through ELF Dynamic Loading) As we all know when you play the CTF server, PWN vulnerability issues generally provide an executable program and a libc library with dynamic links to program running. The library

HID Advanced Attack posture: How to Use PowerShell scripts to steal files     0 × 01 Introduction After the mid-term exam, I had to steal the answer again. I found that the method of remote download and run exe is not very good and it is easy to

Necurs. P2P: A New Type of peer-to-peer network   Last week, I received a botnet analysis sample from a security researcher who thought it was a point-to-point peer-to-peer network, but after I analyzed it for a few days, I can determine that this