Cloud Security

Windows Name resolution mechanism and defect Utilization As a popular science article, this article describes the name resolution mechanism in Windows systems, and also mentions several ways of using the name resolution mechanism defects for

Dpkg Stack Buffer Overflow Vulnerability (CVE-2015-0860)Dpkg Stack Buffer Overflow Vulnerability (CVE-2015-0860) Release date:Updated on:Affected Systems: SmokePing Description: CVE (CAN) ID: CVE-2015-0860Dpkg is a suite management system

Mozilla Firefox information leakage (CVE-2015-7190)Mozilla Firefox information leakage (CVE-2015-7190) Release date:Updated on:Affected Systems: Mozilla Firefox Description: CVE (CAN) ID: CVE-2015-7190Mozilla Firefox is an open-source web

WinRAR brute-force cracking vulnerability official: No need to fix WinRAR was exposed to a high-risk security vulnerability last week. Malicious attackers can embed specific HTML code in the SFX self-extracting module to execute arbitrary code

Mozilla Firefox memory corruption and DoS Vulnerability (CVE-2015-7180)Mozilla Firefox memory corruption and DoS Vulnerability (CVE-2015-7180) Release date:Updated on:Affected Systems: Mozilla Firefox & lt; 41.0Mozilla Firefox & lt; 38.3

MediaWiki contrib/cssgen. php XSS Vulnerability (CVE-2015-6734)MediaWiki contrib/cssgen. php XSS Vulnerability (CVE-2015-6734) Release date:Updated on: 2015-09-02Affected Systems: MediaWiki MediaWiki MediaWiki Description: CVE (CAN) ID: CVE-20

Severe OS X vulnerabilities allow hackers to attack Mac computers without a password In the latest OS X version, a hidden file named Sudoers becomes a serious vulnerability, which allows hackers to attack the system without having to know the

Mozilla Firefox IndexedDatabaseManager (CVE-2015-2728)Mozilla Firefox IndexedDatabaseManager (CVE-2015-2728) Release date:Updated on:Affected Systems: Mozilla Firefox & lt; 39.0Mozilla Thunderbird Mozilla Firefox ESR Description: CVE (CAN) ID:

Qemu pcnet controller heap buffer overflow Arbitrary Code Execution Vulnerability (CVE-2015-3209)Qemu pcnet controller heap buffer overflow Arbitrary Code Execution Vulnerability (CVE-2015-3209) Release date:Updated on:Affected Systems: QEMU

Ngxin prevents concurrency (whitelist, with proxy on the front end) Nginx has two modules to control the "quantity" and "Speed" of access. Simply put, it controls the maximum number of accesses you have at the same time and the maximum number of

From scratch-micro-shot APP Vulnerability Micro-camera is the most popular mobile video social APP on the mobile Internet. It has unique video effects such as skin whitening and skin whitening, the list of social and photography apps in APP stores

Advanced shellcode Programming Technology on windows Preface Concept of binary function shellcode 3. Selection of advanced languages Iv. x86 c2shellcode framework 5x64 c2shellcode framework Summary 7. Thank you Preface The technology described in

Open-Xchange Server and OX App Suite Vulnerability (CVE-2014-9466) Release date:Updated on: Affected Systems:Open-xchange Open-Xchange Server Open-xchange OX App SuiteUnaffected system:Open-xchange Open-Xchange Server 7.6.1-rev14Open-xchange

Information collection at the early stage of Penetration Testing Information collection at the early stage of Penetration Testing Everything starts with a URL. Use Google Hacking to view the target website, such as site: www.baidu.com. You can view

ARP spoofing by network security experts The dark night gave me black eyes, but I used them to turn white eyes. If you have signed a forum using this sentence, you are a veteran hacker or an information security enthusiast. We will discuss remote

Network Security: Analysis of ARP cache infection attacks (lower) Man-in-the-middle attack Hackers use ARP cache poisoning to intercept network information between two devices in your LAN. For example, we assume that hackers want to intercept

Anti-virus attack and defense: Exploitation of simple program vulnerabilitiesI. PrefaceAll the "viruses" mentioned in the previous article are executable files (in the EXE format) and are malicious programs in the traditional sense. They start to

Blackhat: Theory and Practice of WSUS vulnerability Exploitation Paul Stone and Alex Chapman proposed a Windows Server Update Service (WSUS) vulnerability in Blackhat2015. Attackers can exploit this vulnerability by using Man In The Middle (MITM) to

Website vulnerability troubleshooting experience Here we will share some problems that have been detected during Vulnerability Detection on a website Member/user system (generally, all domain names are passport.xx.com). Most of these problems are

EYou email system email body storage type XSS2 (with eYouXSS impact proof attached) New things affect Chrome. During the XSS test, a serious HttpOnly COOKIE leakage was found, which allowed the email body-type XSS to obtain all the cookies of users