Cloud Security

Thoughts: dongle + 360 tips for adding a full set of accounts Cause: a group of people on a certain dayThen he took the wonderful job and never heard of him. There is a saying: "If you are not blind, don't use your ears to understand it !" , Or you

Wordpress XSS Vulnerability (CVE-2015-3438)Wordpress XSS Vulnerability (CVE-2015-3438) Release date:Updated on:Affected Systems: WordPress Description: CVE (CAN) ID: CVE-2015-3438WordPress is a blog platform developed in PHP.Previous versions

Multiple IBM DB2 product Denial of Service Vulnerability (CVE-2015-1935)Multiple IBM DB2 product Denial of Service Vulnerability (CVE-2015-1935) Release date:Updated on:Affected Systems: IBM DB2 Connect Enterprise Edition 9.7IBM DB2 Connect

Google Chrome bypassing same-origin policy vulnerabilities (CVE-2015-1268)Google Chrome bypassing same-origin policy vulnerabilities (CVE-2015-1268) Release date:Updated on:Affected Systems: Google Chrome Description: CVE (CAN) ID:

Cisco TelePresence Multiple Products Remote Command Injection Vulnerability (CVE-2015-0713)Cisco TelePresence Multiple Products Remote Command Injection Vulnerability (CVE-2015-0713) Release date:Updated on:Affected Systems: Cisco TelePresence

Let's talk about the two 0-day fixes in May. On July 15, May 12, 2015, Beijing time, Microsoft pushed the patch on July 15, May, including security updates for multiple components such as IE, Windows kernel, Windows kernel driver, and Office. Two

Deis 1.5.2 released, open-source PaaS System Deis 1.5.2 released and downloaded. This version mainly fixes the following bugs: a4bf040Router: include deis. conf if no match with an SSL cert 1df8eeaController: allow "*" wildcard in cert REST URLs

Google Chrome buffer overflow vulnerability in CVE-2015-1360) Release date:Updated on: Affected Systems:Google Chrome Description:Bugtraq id: 73077CVE (CAN) ID: CVE-2015-1360 Google Chrome is a Web browser tool developed by Google. In Chrome

WPAD-based man-in-the-middle attack 0x00 Preface Windows Name Parsing Mechanism Research and defect utilization (http://www.bkjia.com/Article/201512/452217.html) is very inspired, so the actual use of further research, found that WPAD-based

Rogue DHCP server Intranet attack test Intranet penetration is usually Based on ARP attacks, but ARP attacks are too costly to the Intranet and are easy to detect. Today we are talking about DHCP-based attacks. DHCP-based attacks are easy to

Man-in-the-middle attack on github Source: http://www.netresec.com /? Page = Blog & month = 2015-03 & post = China % 27s-Man-on-the-Side-Attack-on-GitHubAnnouncement released on March 27 by githubWe are suffering from the largest Distributed Denial

Hijack SSH session injection port forwarding0x00 Preface Yesterday, the links in A niuba group were actually suitable for leaving backdoors. They belong to the Post Exploitation stage. I have never used this method before. They are all dumpfounded

Deconstruct APT: the emergence of advanced persistent threats Like many acronyms in the IT, information, and network security industries, the term APT (advanced persistent threat) is becoming widely known. Like new concepts, it and its sibling word

APT sample analysis using NB Exploit Kit attacks 1. Cause Recently, an Heng engineer found a high-risk alarm in an APT threat analysis device deployed on a network, which contains many suspicious behaviors, this includes adding self-starting content,

In-depth analysis of new poser Trojan LogPOS   In recent years, POS malware activities have been frequent. This article analyzes a new member LogPOS sample found in 2015. An important feature of the malware is that it uses the mail slot to avoid

Cracking Point-to-Point Tunneling Protocol (PPTP) encrypted VPN (1) PPTP (Point to Point Tunneling Protocol) is a Point-to-Point Tunneling Protocol. This protocol is a new enhanced security protocol developed on the basis of the PPP protocol. It

Seven key tools for encryption/decryption and password-protected files in Linux (1) Encryption refers to the process of encoding a file, so that only authorized persons can access the file. Before the advent of computers, humans began to use

Webshell Security Detection 0x00 traffic-based detection 1. Overview I have been paying attention to the security analysis of webshell, And I will share my experiences in this period of time. Webshell generally has three detection methods:The

Dongle DOS/injection bypass (can cause a large number of website DoS attacks) 1. Dos A version of dongle does not properly handle parameters, resulting in website 503 Denial of Service. In addition, this version should be very common. A total of 15

A flaw in a management system of Ctrip leads to a large number of merchant password leaks (which affects the security of merchant Funds) It involves Ctrip merchant accounts, information leakage, various background permissions, merchant income amount,