Cloud Security

Google Chrome bypassing same-origin policy vulnerabilities (CVE-2015-1267)Google Chrome bypassing same-origin policy vulnerabilities (CVE-2015-1267) Release date:Updated on:Affected Systems: Google Chrome Description: CVE (CAN) ID:

Microsoft Office Memory Corruption Vulnerability (CVE-2015-1683) (MS15-046)Microsoft Office Memory Corruption Vulnerability (CVE-2015-1683) (MS15-046) Release date:Updated on:Affected Systems: Microsoft Office 2013 RTMicrosoft Office 2013Microsoft

Memory corruption vulnerability in multiple Foxit ProductsMemory corruption vulnerability in multiple Foxit Products Release date:Updated on:Affected Systems: Foxit Reader 7.xFoxit Phantom PDF 7.x Description: Foxit Reader is a small PDF

HP Storage Data Protector Remote Code Execution VulnerabilityHP Storage Data Protector Remote Code Execution Vulnerability Release date:Updated on:Affected Systems: HP Storage Data Protector Description: CVE (CAN) ID: CVE-2015-2116HP Data

SQL Server database penetration from the basics Create lab environment Next, I will provide an example to demonstrate the basic steps for creating an SQL Server. Download Microsoft SQL Server Express and Install SQL Server Management Studio. Follow

APK signature verification Bypass0x01 Android signature mechanism Rename the APK as a zip file and you will see a folder with a META-INF named MANIFEST. MF, CERT. SF and CERT. RSA, which uses signapk. the signature file generated by jar. 1. MANIFEST.

Analysis of vulnerabilities in Internet Explorer (CVE-2014-6350)0x00 Preface   This month, Microsoft fixed three sandbox bounce vulnerabilities in the IE enhanced protection mode, which were disclosed by me (the original author, the same below) in

Latest Version of dongle V3.3 bypass interception injection vulnerability and repair solution There is a problem with the interception and filtering of the latest version of dongle, which can bypass interception for injection.I discovered this

Arbitrary Command Execution Vulnerability in tnftp ftp client (CVE-2014-8517) Release date:Updated on: Affected Systems:NetBSD tnftpDescription:CVE (CAN) ID: CVE-2014-8517 Tnftp is a widely used NetBSD FTP client. Tnftp has a security vulnerability

Tutorial on DNS spoofing-Cain on Windows Today, we will first introduce how to use the famous Cain tool in windows for DNS Spoof (that is, DNS Spoofing). This tutorial is mainly intended for new users. Therefore, each step is captured in detail, I

Ips bypass posture0x00 background Previously, wooyun often saw some bypass methods, such as the Anti-injection function of the bypass web program using the features of mysql, and the direct construction of bypass anti-injection regular expressions.

How to take a measurement method for automated penetration testing Automated penetration testing plays an important role in improving the penetration testing process and reducing required resources. However, if there is no proper method, it may be a

How to configure a host-based Intrusion Detection System on CentOS One of the first security measures that any system administrator wants to deploy on its production server is the file tampering detection mechanism. Criminals tamper with not only

"Pdf file": Trojan Horse also uses cloud Technology Recently, when downloading a PDF file, we found a simple malicious Downloader (a virus type ). Unlike other malicious loaders, this malware adds PE Loader to its binary.Is the zombie online? Once

Anti-Virus Attack and Defense Research: Use WinRAR and AutoRun. inf for self-launchI. Preface from a series of previous studies, we can find that in order to enable the "virus" to start itself, I am also painstaking and have adopted various methods,

Obtain and decrypt Winscp passwords By default, WINSCP saves the user password in the following location in the registry:HKEY_USERS \ SID \ Software \ Martin Prikryl \ WinSCP 2 \ Sessions \However, in WIN7 \ 8, the default WinSCP path is:C: \ Users \

Seven key tools for encryption/decryption and password-protected files in Linux (1) Encryption refers to the process of encoding a file, so that only authorized persons can access the file. Before the advent of computers, humans began to use

Levision video conferencing system can be injected with shell and Intranet. Blind SQL Injection exists in the letv Video Conferencing System. Attackers can use SQL injection to directly write the shell.It seems that this meeting system has just been

Haier customer information management system SQL Injection multi-database (SA permission, large volume of sensitive data) Haier customer information management system SQL Injection multi-database (SA permission, large volume of sensitive data)

Extremely dangerous and common website security vulnerabilities and Solutions Recently, I handled two security vulnerabilities in the company's Internet project, which are common and dangerous. I. reflected Cross-Site Scripting