Cloud Security

Oracle Java SE/JavaFX Remote Vulnerabilities (CVE-2015-4916)Oracle Java SE/JavaFX Remote Vulnerabilities (CVE-2015-4916) Release date:Updated on:Affected Systems: Oracle Java SE 8u60Oracle Java FX 2.2.85 Description: CVE (CAN) ID: CVE-2015-4916

Arbitrary File Upload Vulnerability in MediaWiki (CVE-2015-8003)Arbitrary File Upload Vulnerability in MediaWiki (CVE-2015-8003) Release date:Updated on:Affected Systems: MediaWiki MediaWiki 1.25.x-1.25.3MediaWiki 1.24.x-1.24.4 Description:

Technical analysis: Android libStagefright Vulnerability Analysis The article corresponds to the CVE-2015-{1538,1539, 3824,3826, 3827,3828, 3829} 7 CVE, the specific ing relationship is unknown. This vulnerability affects the security of Android 95%.

BitTorrent and uTorrent Remote Code Execution Vulnerability (CVE-2015-5474)BitTorrent and uTorrent Remote Code Execution Vulnerability (CVE-2015-5474) Release date:Updated on:Affected Systems: BitTorrent Description: Bugtraq id: 75968CVE (CAN)

Realtek rtl81xx SDK Remote Code Execution Vulnerability (CVE-2014-8361)Realtek rtl81xx SDK Remote Code Execution Vulnerability (CVE-2014-8361) Release date:Updated on:Affected Systems: Realtek rtl81xx SDK Description: Bugtraq id: 74330CVE (CAN)

Vulnerability Analysis and POC construction of MS15-035 EMF file processing MS15-035 is a vulnerability in Microsoft Graphics components that process enhanced primitive files (EMF) and may allow remote code execution.Through patch comparison, we can

Siemens Scalance X switch 'HTTP 'Request Denial of Service Vulnerability Release date:Updated on: Affected Systems:Siemens Scalance X Switches X-408Siemens Scalance X Switches X-300Description:Bugtraq id: 72250CVE (CAN) ID: CVE-2014-8478 Siemens

CURL/libcURL Remote Security Restriction Bypass Vulnerability (CVE-2014-8150) Release date:Updated on: Affected Systems:CURL 6.0-7.39.0Unaffected system:CURL> = 7.40.0Description:Bugtraq id: 71964CVE (CAN) ID: CVE-2014-8150 CURL/libcURL is a

Read the IIS Password, and restore the IIS Password to the original When I was working on a project today, I used my iis. vbs to read the iis user list and password. Because sometimes the iis Password is the FTP Password Many of them are listed, but

Talking about the blue ocean strategy of Iot Security 0 × 00 Preface In the past two years, the mobile phone market has shrunk, and global chip manufacturers are no longer able to maintain their competitiveness in the mobile phone field. Iot is the

Rogue DHCP server Intranet attack test Intranet penetration is usually Based on ARP attacks, but ARP attacks are too costly to the Intranet and are easy to detect. Today we are talking about DHCP-based attacks. DHCP-based attacks are easy to

Enhanced authentication and Data Protection Windows 10 is expected to be released by the end of 2015, which will be Microsoft's first operating system to run on all types of devices, including Windows PCs and mobile devices. Running a single

Security problems caused by mobile bank https certificate validity VerificationPreface: In the actual project code audit, it is found that many mobile banking currently Use https communication, but it is only a simple call and does not verify the

Technical Analysis of broadband network operator website hijackingRecently, the home broadband network service illegally hijacked webpage traffic, modified the response of normal webpage requests, and then accessed the normal website through iframe

Centos timed memory release script The following is a script! #! /Bin/bashUsed = 'free-m | awk 'nr = 2' | awk '{print $3 }''Free = 'free-m | awk' NR = 2' | awk' {print $4 }'' Echo "===================================">/var/log/mem.

Linux Rootkit detection method based on memory Analysis0x00 Introduction A Linux server finds an exception. For example, it is determined that the Rootkit has been implanted, but the routine Rootkit detection method by O & M personnel is invalid.

A system of xinnet may leak a large amount of sensitive domain name information, such as a business license. A weak password in a website of xinnet can leak a large amount of sensitive information such as domain names. This website is displayed when

Web security practices (8) attack iis6.0 Through the previous discussion, we have learned how to determine the type of web server. This section continues to discuss web platform vulnerability attacks. The defect mentioned here is the defect of the

A software application in Industrial Bank can directly execute code remotely. The PkEncryptEPin function of the ProBank_Edt.ocx control of the Industrial Bank has stack overflow. This will cause stack overflow, and the EIP will be controlled,

Arbitrary File Upload caused by an Arbitrary File Download problem on the New Oriental Online Learning WebsiteIn fact, this vocabulary teacher is really good. The problem lies in the courseware download,Subconsciously looked at the download link to