Cloud Security

No Password Attack required for Microsoft SQL Server In a recent penetration test, some unencrypted Microsoft SQL Server (MSSQL) traffic was found in some of the packets we captured. At first, we thought that we could sniff the authentication

CURL/libcURL Denial of Service Vulnerability (CVE-2018-1000121)CURL/libcURL Denial of Service Vulnerability (CVE-2018-1000121) Release date:Updated on:Affected Systems: Haxx curl 7.21.0-7.58.0Haxx libcURL 7.21.0-7.58.0 Description: Bugtraq id:

The design defect of a station in the travel network of qinglv leads to a large amount of sensitive information leakage (Order/member number/name/mobile phone number/ID card number/email/address) Qinglv Holdings Co., Ltd. (hereinafter referred to as

ZOHO ManageEngine OpManager hard-coded credential Vulnerability (CVE-2015-7765)ZOHO ManageEngine OpManager hard-coded credential Vulnerability (CVE-2015-7765) Release date:Updated on:Affected Systems: zoho ManageEngine OpManager Description: CVE

Symantec Endpoint Protection Authentication Bypass Vulnerability (CVE-2015-1486)Symantec Endpoint Protection Authentication Bypass Vulnerability (CVE-2015-1486) Release date:Updated on:Affected Systems: Symantec Endpoint Protection Manager

Samsung Galaxy S5 fingerprint data leakage VulnerabilitySamsung Galaxy S5 fingerprint data leakage Vulnerability Release date:Updated on:Affected Systems: Android Samsung Galaxy S5 Description: Samsung Galaxy S5 is a Samsung 4G smartphone

WordPress HDW Player Plugin 'wp-admin/admin. php' SQL Injection Vulnerability Release date:Updated on: Affected Systems:WordPress HDW Player 2.4.2WordPress HDW PlayerDescription:------------------------------------------------------------------------

Unauthorized access to IBM InfoSphere Master Data Management Release date: 2014-08-02Updated on: Affected Systems:IBM InfoSphere Master Data

Release date:Updated on: Affected Systems:IBM WebSphere MQ 7.xDescription:--------------------------------------------------------------------------------Bugtraq id: 54983Cve id: CVE-2012-3294, CVE-2012-2206 IBM WebSphere MQ is used to provide

Release date:Updated on: Affected Systems:Tiki Wiki CMS Groupware 8.2Tiki Wiki CMS Groupware 7.0Tiki Wiki CMS Groupware 6.5 LTSTiki Wiki CMS Groupware 6.4 LTSTiki Wiki CMS Groupware 5.2Description:----------------------------------------------------

Release date:Updated on: Affected Systems:Samsung Smart TV LED 3DDescription:--------------------------------------------------------------------------------Samsung Smart TV is a new generation of TV products. It can obtain program content from

Quickly locate and attack the SQL Server in the domainDirectly locates and attacks the SQL Server in the domain without scanning Share a novel PowerShell script. Instead of scanning, it uses the sps-service Principal Name in the Active Directory to

Note: If you have any questions about the content described in this article, contact Jimmy Xu. DNSSEC has been released for a short time, and the root server has been supported. The. org domain and some ccTLD have been fully deployed. However, it is

In the current world, networks have become an indispensable element. It makes it easy and quick to connect the previously inaccessible things. To make full use of the convenience brought by the network, more and more enterprises choose to publish

As we all know, the biggest difference between Windows and Linux systems lies in its non-open-source nature. Therefore, in Windows, we transfer files and share resources through FTP, compared with the previous TFTP protocol, FTP provides necessary

SSH key logon makes centos servers in VPS more secure As PHP becomes more and more popular, Linux VPS/servers are used more and more, and Linux security issues need to be strengthened. If you have installed DenyHosts and set up email reminders, you

Wordpress is a PHP open-source free blog platform system with powerful functions and ease of use. It is favored by many bloggers and has become the most popular blog system for users. Although wordpress has done a good job in terms of security, we

Improper O & M of Dota2 jewelry transactions exposes usernames and passwords and cookies (10 K + account passwords are collected) Dota2 jewelry Trading Market improper O & M leakage of usernames and passwords and cookies (10 K + account password

Today, many email clients and services provide built-in anti-spam tools, such as Yahoo! Emails, Hotmail, and Microsoft Outlook 2003. In fact, the Built-in anti-spam functions of some products (especially Hotmail and Oddpost) seem to be no worse than

Interview with IBM Greater China Mobile Internet, information security, IBM Global Technical Director, IoT technology general manager Lin yuzhen   Lin yuzhen, general manager of IBM Greater China Mobile Internet, information security, IoT