Cloud Security

The OpenJDK 7 vulnerability has been fixed in Ubuntu 14.04 and Ubuntu 14.10. The OpenJDK 7 vulnerability has been resolved in Ubuntu 14.04 and Ubuntu 14.10. We recommend that you upgrade it as soon as possible. Canonical released the new OpenJDK

Advanced shellcode Programming Technology on windows Preface Concept of binary function shellcode 3. Selection of advanced languages Iv. x86 c2shellcode framework 5x64 c2shellcode framework Summary 7. Thank you Preface The technology described in

Self-cultivation of Trojans: The latest variant of the financial malware f0xy, which is quite witty Security researchers discovered the first f0xy malicious program in January 13, 2015, and then the f0xy infection capability was constantly changing

BadIRET vulnerability Exploitation The Linux kernel code file arch/x86/kernel/entry_64.S versions earlier than 3.17.5 did not correctly handle errors related to the SS (stack) segment register, this allows the local user to initiate an IRET command

GNU glibc gethostbyname Buffer Overflow Vulnerability The gethostbyname function of the GNU glibc standard library has a buffer overflow vulnerability. Vulnerability No.: CVE-2015-0235. For details, see here. Glibc is a C library that provides

Airwatch Multiple Information Leakage Vulnerability (CVE-2014-8372) Release date:Updated on: Affected Systems:VMWare Airwatch Description:Bugtraq id: 71609CVE (CAN) ID: CVE-2014-8372 Airwatch is an enterprise mobile device, mobile application,

Android Hacking Part 12: reinforce Shared Preferences with a third-party library In the previous few issues, we introduced the implementation of Shared Preference during Android Application Development, and demonstrated how to steal Shared

Wireshark SigComp parser Remote Denial of Service Vulnerability (CVE-2014-8710) Release date:Updated on: Affected Systems:Wireshark 1.10.0-1.10.10Description:Bugtraq id: 71069CVE (CAN) ID: CVE-2014-8710 Wireshark is the most popular network

Wireshark AMQP parser Remote Denial of Service Vulnerability (CVE-2014-8711) Release date:Updated on: Affected Systems:Wireshark 1.10.0-1.10.10Description:Bugtraq id: 71070CVE (CAN) ID: CVE-2014-8711 Wireshark is the most popular network protocol

Powershell tricks: Powershell Remoting0x01 Introduction Powershell Remoting is built on the windows WinRM service, which can be one-to-one or one-to-many remote control, or an HTTP or HTTPS "listeners" that uses the WS-MAM protocol to receive

Ten Suggestions for enterprise system security management and enhancement Security management and O & M of enterprise systems involves anti-intrusion and leakage of the company's information systems and data. This is a basic task of great attention

One corner of the gray industry chain on the Internet: rogue software is also a "fight" Overview As an important part of the gray industrial chain of the Internet, rogue software is growing and spreading faster and faster. Currently, this type of

Powershell tricks: Bypass AV0x00 Powershell Introduction Powershell is like bash in linux and can be used by Powershell in windows. NET Framework is powerful and can also call windows APIs. After win7/server 2008, powershell has been integrated

KPPW latest SQL injection vulnerability 8 (global problems cause 12 injection and unauthorized operations) KPPW Latest Version SQL injection vulnerability 8. Identify the culprit from one problem. Global File problems cause 12 injection and

Detailed explanation of Web server security attacks and protection mechanisms (1) Web Server attacks often use Web server software and configuration vulnerabilities. The best practice for these vulnerabilities is to follow some methods to build and

KPPW Latest Version SQL injection vulnerability 4 (multiple injection and unauthorized analysis due to the same problem) KPPW latest SQL injection vulnerability 4 (multiple injection and unauthorized injection due to the same

Wordpress account brute-force cracking Protection I. Modify the database table prefix The default table prefix is wp _. If you have not modified the table prefix when installing the blog, you can refer to this article to modify the table

Free Open-source album piwio & lt; = v2.7.1 SQL Injection Vulnerability Analysis Some time ago, a piwio The following is a test record on the official website: Communicate with piwio authors to learn about the vulnerability and think it has been

General SQL injection vulnerability in the CMS system of Peking University founder Xiang Yu SQL injection is caused by the lack of filtering in the interface of the CMS system "user login verification" of Peking University founder Xiang Yu 正 CMS

Reset any user account 2 and other unauthorized operations in the latest YiDacms version Reset any user account and other unauthorized operations in the latest YiDacms versionYida CMS enterprise website construction system The latest version is