Cloud Security

Getshell, a smart camera server in ZTE's home network, can leak private data such as videos and photos of millions of users on the cloud) Xiaoxing looks at getshell caused by improper configuration of a backend server of the smart camera. There is a

Java deserialization vulnerability batch Detection Preface‍‍Java deserialization vulnerabilities have appeared in people's field of view for a while. The Rubik's Cube security team has reproduced this vulnerability and developed a highly accurate

CloudBees Jenkins Arbitrary Code Execution Vulnerability (CVE-2015-8103)CloudBees Jenkins Arbitrary Code Execution Vulnerability (CVE-2015-8103) Release date:Updated on:Affected Systems: CloudBees Jenkins CloudBees Jenkins Description:

Apache HttpComponents HttpClient DoS Vulnerability (CVE-2015-5262)Apache HttpComponents HttpClient DoS Vulnerability (CVE-2015-5262) Release date:Updated on:Affected Systems: Apache Group HttpComponents HttpClient 〈 4.3.6Apache Group HttpComponents

PhpMyAdmin redirection function content Spoofing Vulnerability (CVE-2015-7873)PhpMyAdmin redirection function content Spoofing Vulnerability (CVE-2015-7873) Release date:Updated on:Affected Systems: phpMyAdmin phpMyAdmin 4.5.x-4.5.1phpMyAdmin

FFmpeg allocate_buffers Denial of Service Vulnerability (CVE-2015-6823)FFmpeg allocate_buffers Denial of Service Vulnerability (CVE-2015-6823) Release date:Updated on:Affected Systems: FFmpeg FFmpeg Description: CVE (CAN) ID: CVE-2015-6823FFmpeg

High risk: Adobe fixed 35 vulnerabilities in Flash this week. This week, Adobe released the latest version of Flash Player 18.0.0.133, which is a restoration enhanced version by convention. According to the update logs published today, as a result,

Wireshark Ptvcursor Denial-of-Service Vulnerability (CVE-2015-6248)Wireshark Ptvcursor Denial-of-Service Vulnerability (CVE-2015-6248) Release date:Updated on:Affected Systems: Wireshark Wireshark 1.12.x Description: Bugtraq id: 76387CVE (CAN) ID:

Android pre-installed plug-in "Certificate door" vulnerability analysis and Restoration 0 × 00 Preface At the 2015 Blackhat Conference, in addition to the Stagefright vulnerability of the Android mobile phone hacked by MMS, many other android

Cisco IOS Software UBR Devices SNMP subsystem Denial of Service VulnerabilityCisco IOS Software UBR Devices SNMP subsystem Denial of Service Vulnerability Release date:Updated on:Affected Systems: Cisco IOS Description: CVE (CAN) ID: CVE-2015-4

Novell Zenworks SQL injection vulnerability in CVE-2015-0780)Novell Zenworks SQL injection vulnerability in CVE-2015-0780) Release date:Updated on:Affected Systems: Novell ZENworks Description: Bugtraq id: 74284CVE (CAN) ID:

How to defend against JavaScript-based DDoS attacks DDoS attack technology is rapidly evolving. The recent JavaScript-based DDoS attack has a unique feature: any browser device may be involved in the attack, and its potential attack scale is almost

Memory corruption vulnerability in multiple Foxit ProductsMemory corruption vulnerability in multiple Foxit Products Release date:Updated on:Affected Systems: Foxit Reader 7.xFoxit Phantom PDF 7.x Description: Foxit Reader is a small PDF

ARPspoof source code can be viewed in an easy way. PrefaceIf your target is a hacker who will use the tool, ignore all of the following content. If your goal is to have your own penetration testing tool and write your own xxxtools, the source code

Brief Analysis of A DDoS Trojan This article is a foreign researcher's analysis of a DDoS Trojan. the MD5 of the Trojan file is 67877403db7f8ce451b72924188443f8. Install There are two subprograms in the main function of the malware to check whether

How to quickly clear Trojans and viruses in the systemWhat hackers need to do after intrusion is to upload a trojan backdoor. In order to prevent the uploaded trojan from being detected, they will try their best to disguise it. As the victim, how

Diffie-Hellman Key Exchange is a popular encryption algorithm. The disclosed information about the Logjam Vulnerability (a variant of the FREAK vulnerability) has been sent to the browser manufacturer. The administrators of large websites are busy

XDCTF2015 code audit full solution         XDCTF is an information security competition for college students nationwide. It is jointly organized by the Information Security Association of xidian and the network defense training base. The aim is to

Change the password of all internal employees of the GreenTree Inn Hotel Management Group to enable entry of multiple internal sites Change the password of all internal employees of the GreenTree Inn Hotel Management Group to enable access to

MetInfo5.3 latest SQL injection version (some data can be obtained) MetInfo5.3 latest SQL Injection Search. php:  $module=intval($module); if($class1)$module=0; if(intval($module)){ $serch_sql.=" where lang='$lang' and (recycle='0' or