Cloud Security

Black more than 70 surveillance cameras are so simple     Recently, a security researcher found that surveillance cameras sold by more than 70 vendors are vulnerable to Remote Code Execution (RCE) attacks. According to the Rotem Kemer study by

Use JavaScript scripts to defend against DDOS attacks Next, I continued to use JavaScript scripts to defend against DDOS attacks.Vs v2The previous tricks are purely entertaining and cannot last long.But it is simple and fun. It seems that this is

Fun sharing: using JavaScript against DDOS attacks Continue to share interesting things. Last time I talked about university attacks with a network cable. Today I will talk about it later. But this is the opposite-not attack, but defense. A

Windows? Secondary? Analysis of a handle permission leakage Bug in the Logon SERVICE0x00 Preface The original author wrote too many clauses, and token handle was exchanged. I felt dizzy when there were a lot of three or four sentences without

Use WinDbg to debug Windows Kernel Process Analysis (2) The previous article introduced the basic environment settings and some basic debugging skills for windbg to debug the kernel. This article introduces some advanced debugging skills for windbg.0

Multiple Cross-Site Scripting Vulnerabilities in phpMyAdmin (CVE-2016-2043)Multiple Cross-Site Scripting Vulnerabilities in phpMyAdmin (CVE-2016-2043) Release date:Updated on:Affected Systems: PhpMyAdmin 4.5.4> 4.5.xPhpMyAdmin 4.4.15.3> 4.4.x

Applocker: Application Control Policy for Windows Network Protection Application whitelist is a powerful technology that can protect our computers from unknown malware, but it has never been used. One of the main reasons is that it is difficult to

Late-night topic: How did these twelve lines of code make the browser explode? |     Cause Today, we found Cyber Security@ Cyber _ secThe Tweets let people shine: Crash firefox, chrome, safari browsers, and also restart iphone using this javascript

Apple iOS libxml2 Memory Corruption Vulnerability (CVE-2015-7116)Apple iOS libxml2 Memory Corruption Vulnerability (CVE-2015-7116) Release date:Updated on:Affected Systems: Apple iOS Apple OS X Apple tvOS Description: CVE (CAN) ID: CVE-2015-71

Isc dhcp DoS Vulnerabilities (CVE-2015-8605)Isc dhcp DoS Vulnerabilities (CVE-2015-8605) Release date:Updated on:Affected Systems: Isc dhcp 4.x Isc dhcp 4.3.x Isc dhcp 4.2.x Description: CVE (CAN) ID: CVE-2015-8605Isc dhcp is an open source

How to Prevent 1024-bit Diffie-Hellman from being cracked On Wednesday, Researchers Alex Halderman and Nadia Heninger proposed that NSA has been able to decrypt a large number of HTTPS, SSH, and VPN connections by attacking a 1024-bit prime number

Oracle out-of-band release for Java SE Vulnerability Analysis (CVE-2016-0636)0 × 00 vulnerability Overview Vulnerability No.: CVE-2016-0636, a variant of the Vulnerability (CVE-2013-5838) that Adam Gowdiak reported to Oracle on 2013. Oracle has not

Payment security first letter easy to pay multi-site SQL Injection & weak background management password & PMA Unauthorized Access Vulnerability Payment security. This domain name is awesome. Beijing Welcomes You! 1. injection point:Python sqlmap.

Thoughts and conclusions on XSS prevention I recently read some web security-related articles, most of which have systematic and complete solutions. However, XSS (Cross-site scripting) attack-related information is messy, even the XSS attacks where

Unauthorized access to jmx-console of a project in Digital China (Getshell/Technical Document leakage/ftp data leakage/sensitive data of multiple project systems) RtThis system should be the CTAIS Project Development System of China's tax

Webpage version link sharing Vulnerability (for example, forging ELE. Me red packet Phishing) Use the web terminal to Modify text-and-text link messages (such as ELE. Me red packet messages), and then send them out. After testing, you can modify the

A motor vehicle driver system in a city in Zhejiang Province (involving a large amount of sensitive information/detailed information of drivers throughout the city/a large amount of assessment data) **. **. **. **/Pages/jsp/sys/login. jsp: the

Cross-Site vulnerabilities of Eastern Airlines (involving oa, arbitrary file downloads, ssrf, etc) Cross-Site vulnerabilities of Eastern Airlines (involving oa, arbitrary file downloads, ssrf, etc) Frms.ceair.com: The pilot information can be

Some devices of a certain type of infrastructure used by China Unicom in a certain province can be controlled (directly leading to network disconnection [reset/reboot]) Network disconnection in minutesIt also makes it difficult for people to take a

A Unicom APP may cause Password Reset problems in batches My girlfriend is a standard Bai fumei. Every time I take my girlfriend out for shopping, I always attract the eyes of many people. Once my girlfriend and I went to eat hot pot, the waiter at