Cloud Security

ImageMagick ReadSIXELImage Heap Buffer Overflow Vulnerability (CVE-2018-5248)ImageMagick ReadSIXELImage Heap Buffer Overflow Vulnerability (CVE-2018-5248) Release date:Updated on:Affected Systems: ImageMagick 7.0.7-17 Q16 Description: Bugtraq

Microsoft Windows Kernel Local Elevation of Privilege (CVE-2018-0744)Microsoft Windows Kernel Local Elevation of Privilege (CVE-2018-0744) Release date:Updated on:Affected Systems: Microsoft Windows Server 2016Microsoft Windows Server 2012

WordPress customizer redirect Restriction Bypass Vulnerability (CVE-2016-5832)WordPress customizer redirect Restriction Bypass Vulnerability (CVE-2016-5832) Release date:Updated on:Affected Systems: WordPress Description: CVE (CAN) ID: CVE-201

Shock: 2/3 the backdoor is hidden by a black website Security experts from network security company Sucuri said they found that 68% of the Hacked websites had hidden backdoor scripts. These backdoor scripts will provide intruders with a second

The old version of the VPN system GETSHELL of wangshen (also affects multiple VPN manufacturers' devices, such as Wangyu Shenzhou, tianrongxin, Xi'an wangying, weishitong, Geda zhengyuan, American concave and convex, and ANIX in Germany) In

Security researchers have proposed a new method to attack mobile phones in seconds.  Recently, two security researchers have proposed a new method to attack smartphones in seconds.Costs about $300Kai Cao and Anil K. Jain from the College of Computer

How to Set and use Firefox sandbox   This article describes and introduces some common Sandbox Settings of Firefox browsers, which can be used as a reference for operations during leisure time. On October 16, August 2015, security expert Cody Crews

Explanation of anti-detection and removal techniques of recent js fraudsters 0x00 Preface Recently, many netizens have reported that hackers have been blackmailed (also known as the "Locky ransomware"), and files, images, and other important

How to Prevent 1024-bit Diffie-Hellman from being cracked On Wednesday, Researchers Alex Halderman and Nadia Heninger proposed that NSA has been able to decrypt a large number of HTTPS, SSH, and VPN connections by attacking a 1024-bit prime number

If the Path of the Momo web server is improperly handled, it can be a forward proxy (idc machines/cannot access the office network) The Path of a web server in Momo is not properly handled. It can be a forward proxy. It is an idc machine and can be

The getshell vulnerability exists due to improper verification by a domain name vendor (information such as + member account and password is leaked) Posanaka!Leakage of a large amount of user information # Control of 18658 domain name resolution #

Due to improper permission control of the Tang Dynasty scanner, you can view some historical vulnerability details. Due to improper permission control of the Tang Dynasty scanner, you can view some historical vulnerability details. Search Baidu

Magento has an XSS vulnerability, which allows attackers to manipulate online malls. Magento is an open-source e-commerce system. It is mainly for enterprise applications and can handle e-commerce needs, including shopping, shipping, and product

Logic vulnerability exists in the safe in the guest room of the binan Hotel. You can change the super administrator password with common permissions. Shanghai binan Industrial Co., Ltd. is located in Shanghai Zhabei District Changan Road No. 1138

Some devices of a certain type of infrastructure used by China Unicom in a certain province can be controlled (directly leading to network disconnection [reset/reboot]) Network disconnection in minutesIt also makes it difficult for people to take a

Spear and shield-Inspiration from blind scan for active security protection In my recent cooperation with a security scanner vendor, I heard the concept of "blind". At that time, I was very curious. Is this a new security attack method? The engineer

Beijing Foreign Company Human Resources Service Co., Ltd. SQL Injection Founded in 1979, Beijing Foreign Company Human Resources Service Co., Ltd. (hereinafter referred to as FESCO) is the first company in China to provide professional human

Website SSL vulnerability repair Guide Some time ago, I scanned the company's website and used the awvs scanner. I found several SSL vulnerabilities. I found some repair suggestions on the Internet and shared them with you, if you encounter the same

An important system of Wanda Group, from SQL injection to system command execution to domain roaming An important system of Wanda Group, from SQL injection to system command execution to domain roaming I. When detecting an APP of Wanda Group through

Click hijacking: a pop-up window is prompted to trick users into clicking cookies.     MalwareBytes experts discovered a "Click hijacking" malicious activity: hackers trick users into clicking a pop-up prompt that appears to be a European Cookie