Cloud Security

Analysis of several security threats facing the medical industry in 2016 At the beginning of 2016, the medical industry suffered from many security incidents, for example, ransomware attacks at the Los Angeles Hospital, ransomware attacks at a

ABB PCM600 password hash Vulnerability (CVE-2016-4511)ABB PCM600 password hash Vulnerability (CVE-2016-4511) Release date:Updated on:Affected Systems: ABB pcm600 Description: CVE (CAN) ID: CVE-2016-4511ABB PCM600 is an IED manager for

Moxa Secure Router Memory Leak Vulnerability (CVE-2016-0877)Moxa Secure Router Memory Leak Vulnerability (CVE-2016-0877) Release date:Updated on:Affected Systems: Moxa EDR-G903 Description: CVE (CAN) ID: CVE-2016-0877The Moxa EDR-G903 is a

Moxa Secure Router text-only Password Vulnerability (CVE-2016-0876)Moxa Secure Router text-only Password Vulnerability (CVE-2016-0876) Release date:Updated on:Affected Systems: Moxa EDR-G903 Description: CVE (CAN) ID: CVE-2016-0876The Moxa EDR-

Microsoft and Adobe are warning about two 0-day vulnerabilities being exploited Microsoft and Adobe respectively issued a warning on the two 0-day vulnerabilities being exploited, one affecting the Windows system and the other, of course, Flash.

Lantronix xPrintServer hard-coded credential Vulnerability (CVE-2016-4325)Lantronix xPrintServer hard-coded credential Vulnerability (CVE-2016-4325) Release date:Updated on:Affected Systems: Lantronix xPrintServer Description: CVE (CAN) ID:

Veritas NetBackup Information Leakage Vulnerability (CVE-2015-6551)Veritas NetBackup Information Leakage Vulnerability (CVE-2015-6551) Release date:Updated on:Affected Systems: Veritas Backup Exec 7.x-7.5.0.7Veritas Backup Exec

Arbitrary File Reading caused by a game configuration error in the QQ space Xunxia? Resin ProblemsRead/etc/passwdHttp://s138.app24599.qqopenapp.com/resin-doc/resource/tutorial/jndi-appconfig/test? InputFile

Pakistan uses an Android APP named SmeshApp to collect Indian Military Intelligence India television CNN-IBN reported that a recent discovery of Pakistan is using a SmeshApp Android APP to collect Indian military intelligence.Google removes

How can I set the shared file access permission and control the Shared File Access to prevent arbitrary access to shared files?The security of shared files is related to enterprises' intangible assets and trade secrets. Therefore, you must properly

PHP re-exploitation after release Vulnerability (CVE-2016-8616)PHP re-exploitation after release Vulnerability (CVE-2016-8616) Release date:Updated on:Affected Systems: PHP 7.x Description: CVE (CAN) ID: CVE-2016-8616PHP is a widely used

PHP serialization/object Injection Vulnerability This article is a short story about PHP serialization/object injection vulnerability analysis. It describes how to obtain the remote shell of a host. If you want to test this vulnerability on your own,

SQL Injection for an important website of Tom Online     POST /redeem/tom_ecardExchange.php HTTP/1.1Content-Length: 191Content-Type: application/x-www-form-urlencodedX-Requested-With: XMLHttpRequestReferer: http://tangyuan.tom.com/Cookie: PHPSESSID=0

If the Path of the Momo web server is improperly handled, it can be a forward proxy (idc machines/cannot access the office network) The Path of a web server in Momo is not properly handled. It can be a forward proxy. It is an idc machine and can be

Information Security penetration test training notes No surprise, the speaker has begun, entitled penetration testing. This article describes how to use the attacker's method to identify non-destructive vulnerabilities with Party A's

Toshiba e-STUDIO series printer Vulnerability (unauthorized access) RT Toshiba e-STUDIO Series Printers can access historical printer files and data without authorization, restore printed files, and package and send them. This results in the leakage

Vulnerability Analysis of an attack Tracing System (affecting customers' core network segments and sensitive monitoring information) The device is deployed on the Intranet. the device is directly connected to the host device monitored on the

Hero mutual entertainment weak passwords in SQL injection at the background of a website (the number of game user data involved in a gun battle is unknown) Take the small vendor-before getshell, It would be 2 rank AH (some of the information is also

Commands executed by a station in ChangHong enter the Enterprise Intranet (affecting the security of dozens of hosts) + multiple backdoor files are found to have been infiltrated Commands executed by a station in ChangHong enter the enterprise's

New ways of intrusion into the system can be accessed through VPN VPN has become more and more widely used. Some people use it to bypass the review system, some use it to access websites prohibited by the State, and some use it as the privacy