Cloud Security

Remote buffer overflow vulnerability in Apple iTunes '. pls' fileRemote buffer overflow vulnerability in Apple iTunes '. pls' file Release date:Updated on:Affected Systems: Apple iTunes 10.6.1.7 Description: Bugtraq id: 74467ITunes is a digital

Lenovo computer system updates found serious Security Vulnerabilities Security company IOActive discloses a high-risk vulnerability in Lenovo computer system updates that has been fixed. Security researchers notified Lenovo in February this year

Simatic tia Portal Denial of Service Vulnerability (CVE-2015-2822)Simatic tia Portal Denial of Service Vulnerability (CVE-2015-2822) Release date:Updated on:Affected Systems: Siemens SIMATIC WinCC (TIA Portal) Description: CVE (CAN) ID: CVE-20

WebGate Control Center 4.8.7 GetThumbnail Stack Overflow Vulnerability Release date:Updated on: Affected Systems:Webgate WebGate Control Center 4.8.7Webgate WebGate Control CenterDescription:CVE (CAN) ID: CVE-2015-2099 WebGate Control Center is the

Analysis of IE sandbox Privilege Elevation Vulnerability (CVE-2015-0016) Microsoft's Tuesday patch, as scheduled this month, includes a MS15-004 patch that fixes a vulnerability that could lead to Elevation of Privilege (CVE-2015-0016), a very rare

Android Hacking Part 6: Debugging Android applications In the future, we will learn how to use JDB to debug Android applications. If an Android Application can be debugged, we can inject and run our own code in the Process of the

The latest version of Android in sogou browser UXSS (not limited by the System Version) After several waves of webkit UXSS baptism, it was found that the sogou browser basically had no guns, so the security was relatively good. However, this UXSS

Use Wireshark to analyze ICMP Packets ICMP protocol Introduction 1. ICMP is the abbreviation of "Internet Control Message Protocol" (Internet Control Message Protocol. It is a sub-Protocol of the TCP/IP protocol family. It is used to transmit

WebKit Multiple Memory Corruption Vulnerabilities (APPLE-SA-2014-08-13-1) Release date:Updated on: Affected Systems:WebKit Open Source Project

WordPress FB Gorilla plugin 'game _ play. php' SQL Injection Vulnerability Release date:Updated on: Affected Systems:WordPress FB GorillaDescription:--------------------------------------------------------------------------------Bugtraq id: 69222CVE

Ips bypass posture0x00 background Previously, wooyun often saw some bypass methods, such as the Anti-injection function of the bypass web program using the features of mysql, and the direct construction of bypass anti-injection regular expressions.

Technical Analysis of broadband network operator website hijackingRecently, the home broadband network service illegally hijacked webpage traffic, modified the response of normal webpage requests, and then accessed the normal website through iframe

Intranet penetration-domain penetration Basics1. Domain environment construction + recognition domain + experiment environment 1. Preface:I have always wanted to penetrate the domain, but unfortunately I have not met a good domain environment. I

Rhel replace CentOS yum source one-click installation script Most of the systems recently used are rhel, And the yum of rhel cannot be installed online. Therefore, a one-click installation script is written to support rhel5.x & rhel6.x, which is the

How to fix severe Bash vulnerabilities in CentOSHello, a very serious security vulnerability (vulnerability reference https://access.redhat.com/security/cve/CVE-2014-6271) was recently detected in the Linux official built-in Bash, hackers can take

Xml file security Parsing XML eXtensible Markup Language, designed for data transmission and storage. Its diverse forms 1. Document Format (OOXML, ODF, PDF, RSS, docx ...) 2. Image Format (SVG, EXIF Headers ,...) 3. configuration file (custom name,

An ssl vpn entry in the bianfeng network can be controlled to hijack the password (success stories) The ssl vpn entry custom framework has a security vulnerability in implementation. unauthenticated remote attackers can exploit this vulnerability to

Ecshop one verification code bypass logic Vulnerability A logic vulnerability causes Bypassing Although the verification code is encrypted, there are still some logic problems.The problem lies in.. \ Shortdes \ cls_captcha.phpThrough the

Purchase Web application firewall? You must consider these questions (1) Web Application Firewall is a complex product. In this article, expert Brad Causey describes the key issues that enterprises need to consider before purchasing WAF

Canvas fingerprint Tracking Technology Based on HTML5 Today, there are many ways to track visitors, such as using the cookie technology on the user side, which has been abandoned by most companies, now there is a new way to replace cookies to track