Cloud Security

Samba SMB1 ACL Overwriting Vulnerability (CVE-2015-7560)Samba SMB1 ACL Overwriting Vulnerability (CVE-2015-7560) Release date:Updated on:Affected Systems: Samba Samba 3.2.0-4.4.0rc3 Description: CVE (CAN) ID: CVE-2015-7560Samba is a free software

OpenSSL SRP_VBASE_get_by_user Memory leakage (CVE-2016-0798)OpenSSL SRP_VBASE_get_by_user Memory leakage (CVE-2016-0798) Release date:Updated on:Affected Systems: OpenSSL Project OpenSSL OpenSSL Project OpenSSL Unaffected system: OpenSSL Project

Cisco NX-OS Software Denial of Service Vulnerability (CVE-2015-6260)Cisco NX-OS Software Denial of Service Vulnerability (CVE-2015-6260) Release date:Updated on:Affected Systems: Cisco Nexus 6000Cisco Nexus 5600Cisco Nexus 5500 Description:

Nettle x86_64/ecc-384-modp.asm Security Vulnerability (CVE-2015-8804)Nettle x86_64/ecc-384-modp.asm Security Vulnerability (CVE-2015-8804) Release date:Updated on:Affected Systems: Nettle nettle> 3.2 Description: CVE (CAN) ID:

Google Chrome Omnibox Spoofing Vulnerability (CVE-2016-1615)Google Chrome Omnibox Spoofing Vulnerability (CVE-2016-1615) Release date:Updated on:Affected Systems: Google Chrome Description: CVE (CAN) ID: CVE-2016-1615Google Chrome is a Web

Ipswitch WhatsUp Gold SQL injection vulnerability in CVE-2015-8261)Ipswitch WhatsUp Gold SQL injection vulnerability in CVE-2015-8261) Release date:Updated on:Affected Systems: Ipswitch WhatsUp Gold Description: CVE (CAN) ID:

Analysis of Drag and Drop security policies in IE sandbox 0x00 Preface Internet Explorer sandbox escape is an important topic in Internet Explorer security research. One type of vulnerability uses the defects of the white list program in

Isc bind Denial of Service Vulnerability (CVE-2015-8461)Isc bind Denial of Service Vulnerability (CVE-2015-8461) Release date:Updated on:Affected Systems: Isc bind 9. x-9.9.8-P2Isc bind 9.10.x-9.10.3-P2 Description: CVE (CAN) ID:

How to integrate the SDK (a simple set of REST APIs) into your event response Workflow We believe that malware recognition should be easy, efficient, and powerful. This is what Deepviz wants to achieve. This article shows what our SDK (a simple set

Click fraud malware poses a greater threat Damballa's latest report identifies malware evolved from click fraud attacks. How does it work? What I know is that sometimes low-risk attacks often cause more serious harm, but we do not have the human

TIPS: how to hide and prevent computer encrypted folders from being decrypted Once a day, the computer in the house has been infected, and the "encrypted folder" in the computer cannot be hidden. The Goddess in the hard disk has a small hiding place,

Cool music WWW main site + multiple substations SQL Injection Vulnerability Cool music WWW main site + multiple substations SQL Injection Vulnerability The SQL injection vulnerability exists in the WWW main site and multiple substations, and is

Portal application Apache Jetspeed 2.3.0 and earlier versions: Remote Code Execution Vulnerability Analysis     As one of my personal projects on "security of open-source software for friendship detection", I am going to play with Apache Jetspeed 2

Packaging and submission of Dangdang design defects for E-Commerce Security (affecting 32 million orders, customer contact addresses, etc) RTLog On from login.dangdang.com. It should be Dangdang... 1, URL：http://huishou.dangdang.com/ When logging on

H3C communication examination system Getshell can be Intranet (affects the security of dozens of Intranet terminals) RtI have to learn h3c for more than half of my college time. I don't know

Password-free login for Android clients such as China Unicom's wowo mailbox (any Unicom user's pop3 PASSWORD can be obtained) By accident, I found that wowemail and wowo had no password login, and other apps had not been tested yet. By accident,

Principle Analysis of Word type Obfuscation Vulnerability (CVE-2015-1641) AforementionedWord does not verify the customXML object when parsing docx documents to process the displacedbymmxml attribute. It can pass in other tag objects for processing,

Spear and shield-Inspiration from blind scan for active security protection In my recent cooperation with a security scanner vendor, I heard the concept of "blind". At that time, I was very curious. Is this a new security attack method? The engineer

Improper configuration of Financial Management fan services leads to leakage of background management system source code RT Incorrect git Configuration  http://42.62.67.117/.git/config   Access http: // 42.62.67.117/wp-admin/Jump to

A system of Renmin University of China has the SQL injection vulnerability. Http://labsafe.ruc.edu.cn/index.php? A = examtraining & c = index & id = 1 & m = member & type = TF  sqlmap resumed the following injection point(s) from stored