Cloud Security

Apple OS X Graphics Drivers Memory Corruption Vulnerability (CVE-2016-4634)Apple OS X Graphics Drivers Memory Corruption Vulnerability (CVE-2016-4634) Release date:Updated on:Affected Systems: Apple OS X Description: CVE (CAN) ID: CVE-2016-463

Siemens SIMATIC WinCC Information Leakage Vulnerability (CVE-2016-5744)Siemens SIMATIC WinCC Information Leakage Vulnerability (CVE-2016-5744) Release date:Updated on:Affected Systems: Siemens SIMATIC WinCC Siemens SIMATIC windows CC 7.2

OpenSSL dsa_sign_setup Vulnerability (CVE-2016-2178)OpenSSL dsa_sign_setup Vulnerability (CVE-2016-2178) Release date:Updated on:Affected Systems: OpenSSL Project OpenSSL Description: CVE (CAN) ID: CVE-2016-2178OpenSSL is an open-source SSL

ANDROID Qualcomm TrustZone Privilege Escalation Vulnerability (CVE-2016-2432)Android Qualcomm TrustZone Privilege Escalation Vulnerability (CVE-2016-2432) Release date:Updated on:Affected Systems: Android Android Description: CVE (CAN) ID: CVE-

Linux kernel wacom_probe DoS Vulnerability (CVE-2016-3139)Linux kernel wacom_probe DoS Vulnerability (CVE-2016-3139) Release date:Updated on:Affected Systems: Linux kernel Description: CVE (CAN) ID: CVE-2016-3139Linux Kernel is the Kernel of the

Technology sharing: Build poc for malware by using python and PyInstaller Disclaimer: This article is intended to be shared and never used maliciously!This article mainly shows how to use python and PyInstaller to build some poc of malware.As we all

Google Chrome Security Restriction Bypass Vulnerability (CVE-2016-1629)Google Chrome Security Restriction Bypass Vulnerability (CVE-2016-1629) Release date:Updated on:Affected Systems: Google Chrome Description: CVE (CAN) ID:

Apple Safari HSTS mechanism Bypass Vulnerability (CVE-2015-7094)Apple Safari HSTS mechanism Bypass Vulnerability (CVE-2015-7094) Release date:Updated on:Affected Systems: Apple iOS Description: CVE (CAN) ID: CVE-2015-7094IOS is an operating

Yahoo! Messenger Stack Buffer Overflow Vulnerability (CVE-2014-7216)Yahoo! Messenger Stack Buffer Overflow Vulnerability (CVE-2014-7216) Release date:Updated on:Affected Systems: Yahoo! Messenger 11.5.0.228Yahoo! Messenger

HP Matrix Operating Environment Vulnerability (CVE-2015-5429)HP Matrix Operating Environment Vulnerability (CVE-2015-5429) Release date:Updated on:Affected Systems: HP Matrix Operating Environment Description: CVE (CAN) ID: CVE-2015-5429HP

Explore the Stagefright vulnerability: POC and EXP PrefaceIn the previous "Discussion on Stagefright vulnerabilities", we have determined the location where the vulnerabilities are generated, and the entire article stops. After all, this

Start with: What about malicious code!Hacker malicious code   Any software or code that causes damage to users, computers, or networks in some way can be considered malicious code.  Category  Infected Virus Worm Trojan hacker tool HackTool Spyware

Case study of a rare MSSQL Injection Vulnerability     The author is going to share a fairly rare vulnerability found in last year's Google rewards program, the only one that the author has encountered throughout his penetration testing career. The

BYD remote command execution can roam 44 hosts in the Intranet High rank 219.134.188.42  A byd siteJAVA deserialization command execution vulnerability exists!  The host name can also be seen as byd.Ipconfig  Intranet IP address, which can

Principle Analysis of Word type Obfuscation Vulnerability (CVE-2015-1641) AforementionedWord does not verify the customXML object when parsing docx documents to process the displacedbymmxml attribute. It can pass in other tag objects for processing,

Xiangpeng aviation's system SQL injection (you can run the SQL-shell command) Xiangpeng aviation's system SQL Injection Http: // **. **/web/Help. aspx? Code = Private injection parameter: code    sqlmap identified the following injection points

More than 1000 weak passwords of the O & M system of China tower company leak a large number of base stations, O & M monitoring, data centers, maintenance teams, contracts, and other information throughout the country. Too many weak passwords.Find

The Hong Kong Airlines APP has the SQL Injection Vulnerability (which can span 32 databases) Aviation security-Hong Kong Airlines APP InjectionDetailed description: Objective: To launch the Hong Kong Airlines APPCheck that SQL Injection exists in

Crossdomain. xml evil usage example Introduction: This starts *The crossdomain. xml file specifies the access domain name read/write request. This file should be restricted to a trusted website, but not on the spreaker website. Wildcard characters

Unknown attack Yizhi anti--Webshell deformation technology highlights This article mainly analyzes and refines the Web Shell deformation technology. 0x1: Use string deformation technology to change hidden signatures The traditional shell kill-free