Cloud Security

Huawei P8 GPU driver DoS Vulnerability (with test code) Multiple Huawei P8 mobile phones use arm mali gpu. This chip driver has a Denial-of-Service vulnerability. Attackers with any permission can exploit this vulnerability to crash the mobile

Dual-game design flaws: Listening to encrypted channel calls Read the sub-ID information and modify the local data to listen for encrypted channel calls.Detailed description:   The sub-channel ID is obtained successfully. In the encryption

Isc bind Denial of Service Vulnerability (CVE-2015-8461)Isc bind Denial of Service Vulnerability (CVE-2015-8461) Release date:Updated on:Affected Systems: Isc bind 9. x-9.9.8-P2Isc bind 9.10.x-9.10.3-P2 Description: CVE (CAN) ID:

Cisco ios xe Network Address Translation Denial of Service Vulnerability (CVE-2015-6282)Cisco ios xe Network Address Translation Denial of Service Vulnerability (CVE-2015-6282) Release date:Updated on:Affected Systems: Cisco IOS XE Description:

Wireshark 'epan/packet. c' Remote Denial of Service Vulnerability (CVE-2015-6243)Wireshark 'epan/packet. c' Remote Denial of Service Vulnerability (CVE-2015-6243) Release date:Updated on:Affected Systems: Wireshark Wireshark

Wordpress XSS Vulnerability (CVE-2015-3438)Wordpress XSS Vulnerability (CVE-2015-3438) Release date:Updated on:Affected Systems: WordPress Description: CVE (CAN) ID: CVE-2015-3438WordPress is a blog platform developed in PHP.Previous versions

In the face of the most serious vulnerabilities in history, Google has taken new measures against Android, ...... A few days ago, the network security organization Zimperium found a Stagefright vulnerability on the Android system. It is the most

WordPress MailCWP plugin 'mailcwp-upload. php' Arbitrary File upload VulnerabilityWordPress MailCWP plugin 'mailcwp-upload. php' Arbitrary File upload Vulnerability Release date:Updated on:Affected Systems: WordPress MailCWP Description:

Siemens SIPROTEC 4 Denial of Service Vulnerability (CVE-2015-5374)Siemens SIPROTEC 4 Denial of Service Vulnerability (CVE-2015-5374) Release date:Updated on:Affected Systems: Siemens SIPROTEC 4 Description: CVE (CAN) ID: CVE-2015-5374SIPROTEC 4

OpenSSL BN_GF2m_mod_inv Function Denial of Service Vulnerability (CVE-2015-1788)OpenSSL BN_GF2m_mod_inv Function Denial of Service Vulnerability (CVE-2015-1788) Release date:Updated on:Affected Systems: OpenSSL Project OpenSSL OpenSSL Project

Vulnerability exploitation in penetration testing1. Search for vulnerabilities in the target system In the previous article on penetration testing, this article describes how to collect information about the target system. Next, we will take any

Man-in-the-middle attack on github Source: http://www.netresec.com /? Page = Blog & month = 2015-03 & post = China % 27s-Man-on-the-Side-Attack-on-GitHubAnnouncement released on March 27 by githubWe are suffering from the largest Distributed Denial

From the "Korean Express" Payment virus: SMS Trojans started to attack South Korea OX00 Preface Recently, it was found that the virus disguised as a well-known Korean software-"Korean express delivery" after a second package. It is analyzed that the

The logon page of Nanning financial assets trading center has SQL injection to obtain user data. Nanning financial assets trading center, a financial assets trading center with a well-known ZF background, has SQL Injection on the logon page to

Webshell detection-Log Analysis It is always believed that the final meaning of log analysis is evidence collection and prediction-a complete story of ongoing, ongoing, and future attacks (when. where. who. what happened. why ).This article explains

Web server cluster Construction I. Requirement Analysis:1. overall requirement: Build a highly available website server cluster that can withstand high-concurrency requests and defend against general network attacks. The return of any server does

Server template injection: remote code execution on modern WEB 0x01 development ExploitMany template engines attempt to limit the ability of the template program to execute arbitrary code to prevent the Application Layer logic from attacking the

XSS Cross-Site Scripting in Web Security In this article, XSS (Cross-Site Scripting), one of the common web attack methods, is used to explain the attack principles and propose corresponding solutions.XSS XSS attack, full name:"Cross-Site

36kr user information leakage: contact information of all investors/founders + stored XSS When I met an investor in the morning, he said, "Let me remember your team in 10 seconds." I gave him a slap when I thought about it. While he was still

P2p financial security: a serious logic vulnerability in souyi loan (affecting users' financial security) Problem: reset any User Password Steps:1. Address: https://passport.souyidai.com/password/findpasswordOpen the above two addresses in the