Cloud Security

Isc dhcp DoS Vulnerabilities (CVE-2015-8605)Isc dhcp DoS Vulnerabilities (CVE-2015-8605) Release date:Updated on:Affected Systems: Isc dhcp 4.x Isc dhcp 4.3.x Isc dhcp 4.2.x Description: CVE (CAN) ID: CVE-2015-8605Isc dhcp is an open source

Research on Android system call hook (I) When talking about Xposed, everyone should be very familiar with it. It mainly hooks the target function at the Java layer, and is powerless to call the underlying system. Since the hook system calls need to

Giflib giffix Heap Buffer Overflow Vulnerability (CVE-2015-7555)Giflib giffix Heap Buffer Overflow Vulnerability (CVE-2015-7555) Release date:Updated on:Affected Systems: Giflib Description: CVE (CAN) ID: CVE-2015-7555Giflib is a library and

Easy access to company master router control permission note Let's talk about the background first. The company where the blogger is located is an advertising company, which was recently relocated. In order to save costs, I pulled a 50 m Unicom

Analysis of Internal attack detection methods based on user file objects Preface A few days ago, I saw an article on FB about the application of machine learning in the security field, "is machine learning ready for the security industry?". It seems

Mozilla Firefox information leakage (CVE-2015-7195)Mozilla Firefox information leakage (CVE-2015-7195) Release date:Updated on:Affected Systems: Mozilla Firefox Description: CVE (CAN) ID: CVE-2015-7195Mozilla Firefox is an open-source web

Belkin F9K1111 firmware Vulnerability Analysis Recently, we have noticed that HP DVLabs has found at least 10 vulnerabilities in the Belkin (Belkin) N300 dual-band WiFi provisioner (F9K1111. In response, Belkin released the firmware version 1.04.10.

Adobe Flash Heap Buffer Overflow Vulnerability (CVE-2015-3113)Adobe Flash Heap Buffer Overflow Vulnerability (CVE-2015-3113) Release date:Updated on:Affected Systems: Adobe Flash Player Adobe Flash Player Adobe Flash Player Description: CVE

Tomcat security manager Bypass Vulnerability (CVE-2014-7810) Tomcat Security Manager Bypass Vulnerability, Vulnerability No.: CVE-2014-7810 Security Manager BypassVulnerability severity: AverageAffected Versions:--Apache Tomcat 8.0.0-RC1 to 8.0.15--

ARP spoofing and man-in-the-middle attacksPreface: In the previous WPA/WAP2wifi password cracking note, we talked about how to detect nearby open APs and crack the access, so what can we do when we enter someone else's lan? In other words, what will

Analysis of false Communication Base Station Information Interception 0 × 01 current network simulation base station usage and impact analysis With the development of mobile communication technology, base stations of various mobile communication

SHELL script for collecting DELL server hardware information Recently, an asset list is required to collect the hardware information of the DELL server, including the following information: 1. Operating System Information (type, version, kernel,

Analysis on How to Improve Anti-Trojan tracking capability from the perspective of anti-Trojan Preface First, I declare that I am neither a technician of the antivirus software manufacturer nor a hacker. Writing this article only records some

In those years, we will explore the global protection of SQL injection and the UrlDecode of Bypass.0x01 background Currently, WEB programs basically have global filtering for SQL injection, such as enabling GPC in PHP or common in global files. use

Registration on the RSA Conference: Collect the registrant's Twitter plaintext creden Recently, security experts found a strange phenomenon on Twitter: the website registration page of the RSA Information Security Conference required to collect the

Cross-Site vulnerabilities of Eastern Airlines (involving oa, arbitrary file downloads, ssrf, etc) Cross-Site vulnerabilities of Eastern Airlines (involving oa, arbitrary file downloads, ssrf, etc) Frms.ceair.com: The pilot information can be

Dswjcms p2p online lending system front-end 4 SQL Injection Injection. Official Website demo Case reference.Bytes -------------------------------------------------------------------------------------#1/Lib/Action/Win/IndexAction. class. php  Public

A VoIP operation support system has the general SQL Injection & Arbitrary File Traversal Vulnerability (a large number of enterprises are affected) Kunshi Network Technology Co., Ltd. develops a support system for small and medium-sized scale VoIP

This article tells you how to break through cafe24 virtual host enterprise mail server in Korea Cafe24, Korea's largest carrier, is home to countless Korean website hosting sites. Independent hosts and virtual hosts cannot be generalized because of

XSS ChEF v1.0 graphic tutorial We all know that XSS vulnerabilities have two basic forms: saved XSS and reflected XSS. Saved XSS can persist cross-site scripts, if the encoding is not performed when processing user input and the dynamic output