Cloud Security

Apache Cordova iOS arbitrary plug-in Execution Vulnerability (CVE-2015-5208)Apache Cordova iOS arbitrary plug-in Execution Vulnerability (CVE-2015-5208) Release date:Updated on:Affected Systems: Apache Group Cordova iOS Description: CVE (CAN)

Wireshark IEEE 802.11 parser Denial of Service Vulnerability (CVE-2016-4078)Wireshark IEEE 802.11 parser Denial of Service Vulnerability (CVE-2016-4078) Release date:Updated on:Affected Systems: Wireshark 2.0.x Wireshark 1.12.x Description:

Arbitrary Code Execution Vulnerability in Squid ESI (CVE-2016-4054)Arbitrary Code Execution Vulnerability in Squid ESI (CVE-2016-4054) Release date:Updated on:Affected Systems: Squid 4.x Squid 3.x Description: CVE (CAN) ID: CVE-2016-4054Squid

Kamailio SEAS module Heap Buffer Overflow Vulnerability (CVE-2016-2385)Kamailio SEAS module Heap Buffer Overflow Vulnerability (CVE-2016-2385) Release date:Updated on:Affected Systems: Kamailio 4.3.4 Description: CVE (CAN) ID:

Apple iOS AppleUSBNetworking Memory Corruption Vulnerability (CVE-2016-1734)Apple iOS AppleUSBNetworking Memory Corruption Vulnerability (CVE-2016-1734) Release date:Updated on:Affected Systems: Apple iOS Description: CVE (CAN) ID: CVE-2016-17

Apple iOS IOHIDFamily Memory Corruption Vulnerability (CVE-2016-1748)Apple iOS IOHIDFamily Memory Corruption Vulnerability (CVE-2016-1748) Release date:Updated on:Affected Systems: Apple iOS Description: CVE (CAN) ID: CVE-2016-1748IOS is an

Manual security check to ensure system security and stable operation Microsoft has heard of File digital signature verification. Microsoft introduces a digital signature mechanism for key files of the system to maintain system integrity. Because

Oracle Outside In Technology Local Denial of Service Vulnerability (CVE-2015-6015)Oracle Outside In Technology Local Denial of Service Vulnerability (CVE-2015-6015) Release date:Updated on:Affected Systems: Oracle Outside In Technology 8.5.2Oracle

FFmpeg smka_decode_frame Function Denial of Service Vulnerability (CVE-2015-8365)FFmpeg smka_decode_frame Function Denial of Service Vulnerability (CVE-2015-8365) Release date:Updated on:Affected Systems: FFmpeg FFmpeg FFmpeg FFmpeg

FFmpeg decode_uncompressed Function Denial of Service Vulnerability (CVE-2015-8218)FFmpeg decode_uncompressed Function Denial of Service Vulnerability (CVE-2015-8218) Release date:Updated on:Affected Systems: FFmpeg Description: CVE (CAN) ID:

Sigreturn Oriented Programming (SROP) Attack Principle I wrote an article last year to introduce the BROP attack. The response was quite good and helped many people understand this very smart attack principle. Of course, you can also go to my blog

Talking about advanced combination technology to create a perfect webshell   0x00 Introduction I have previously written an article about Client phishing: Using powershell Client for effective phishing, in the process of using each Client for

Threat intelligence basics: crawling, walking, and analysis (Part 2) This is the second article in the basic threat intelligence trilogy. We will discuss how to use threat intelligence and its basic principles in security operations.Cooks, tailor,

Compile a Python applet to calculate the keyword analysis of the test script Generally, when the automated test project reaches a certain program, a lot of test code will naturally be written. If some basic functions and business functions need to

Cross-Domain jsonp interface of a website of China Unicom leads to information leakage (risks arising from additional feature insertion by the operator) Cross-Domain jsonp interface of a website of China Unicom causes information leakage, which may

Package vulnerabilities on a giant's website (weak passwords \ SQL Injection \ PMA access \ SVN leakage) Conscience vendors are rare (* accounts ^ Accounts *) Http: // 222.73.243.217/weak password: xubin 123456This background seems to be obsolete,

Broadlink smart ecosystem vulnerability details With the rapid development of consumer electronic devices and the delivery of Iot in our daily lives, chip manufacturers and a large number of smart device entrepreneurial teams have increased

Start with these 13 steps in case of server faults When our team was responsible for O & M, optimization, and expansion for the previous company, we met various systems and basic devices with poor performance in different scales (most of large

Webshell Security Detection (2)-deep into the user's heart1. What is WEBSHELL? What does it mean? What is Webshell from different perspectives?Programmer: an executable web script file. It means a script. Hacker: something that can be used to

Domain name root server suffered two large-scale attacks: 5 million attacks per second In the early morning of January 1, December 11, Beijing time, the root servers of multiple domain name systems were attacked twice at the beginning of last week.