Cloud Security

Technical analysis: Android libStagefright Vulnerability Analysis The article corresponds to the CVE-2015-{1538,1539, 3824,3826, 3827,3828, 3829} 7 CVE, the specific ing relationship is unknown. This vulnerability affects the security of Android 95%.

OpenSSL Certificate verification Security Restriction Bypass Vulnerability (CVE-2015-1793)OpenSSL Certificate verification Security Restriction Bypass Vulnerability (CVE-2015-1793) Release date:Updated on:Affected Systems: OpenSSL Project OpenSSL 1.0

WordPress Estrutura-Basica topic 'download. php' Arbitrary File download VulnerabilityWordPress Estrutura-Basica topic 'download. php' Arbitrary File download Vulnerability Release date:Updated on:Affected Systems: WordPress Estrutura-Basica

Cambridge University researcher found multiple Android devices have vulnerability in restoring original factory settings I thought that your Android device can be sold with "Restore original factory settings" without any worry. That's wrong.

Tcpdump DoS Vulnerability (CVE-2015-2154) Release date:Updated on: Affected Systems:Tcpdump 4.xDescription:Bugtraq id: 73017CVE (CAN) ID: CVE-2015-2154 Tcpdump is a sniffing tool running on the command line. It allows users to intercept and

PostgreSQL 'pgcrypto' Module Buffer Overflow Vulnerability (CVE-2015-0243) Release date:Updated on: Affected Systems:PostgreSQL 9.4PostgreSQL 9.1PostgreSQL 8.4Description:Bugtraq id: 72542CVE (CAN) ID: CVE-2015-0243 PostgreSQL is an advanced

Research and bypass of PXN Protection Technology Introduction to Linux Security Mechanism In recent yearsAndroidThe rise of the system,AndroidUnderlying implementationLinuxKernel security issues have become increasingly popular. To reduce the harm

Reverse basic Finding important/interesting stuff in the code (1) V. Search for interesting or important parts of the Code In modern software design, minimalism is not particularly important. It is not because programmers write a lot of code, but

Null Pointer Vulnerability Protection Technology-improvementIn this article, we introduced the concept of NULL pointer and Null Pointer Vulnerability. In this advanced article, we will introduce the use of NULL pointer and corresponding protection

Video website security-first video a platform has high-risk logic design defects (directly affecting more than 200 million players) Penetration falls in love with auditingHigh-risk logic design defects, tearing back the background ~  Http://tg.g.v1

Auspicious life arbitrary mobile phone number registration and password Modification Vulnerability 1: register any mobile phone number and click "register". Enter your mobile phone number and the SMS verification code you receive.Click capture when

A marketplace has been injected to obtain more than 500 million user information and more than 600 million merchant information. User Data is leaked, and the mobile phone number of the ID card is exposed.   GET

Source code leaked by SVN of a website in Weifeng (email database account) SVN leakage email database account of a website in Weifeng SVN leakage: http://edm.feng.com/.svn/entries $ Db ['default'] ['hostname'] = '2017. 0.0.1 '; $ db ['default']

Jinan Fu Cai net has SQL injection. Cause leakage of other databases Last time it was Guangdong de.This time, the account has no money to decrypt the token 5. Boring background Jinan Fu caiwangHttp://www.jnscp.cn/Http://www.jnscp.cn/detailNews.jsp?

What should I do after the website is attacked by hackers? If your website is unfortunately attacked, follow the prompts below: 1. confirm that the website to be attacked has been tampered with. All possible attacks only involve website permissions,

Zookeeper Vulnerability Analysis For those who do not know ZooKeeper, it is a well-known open-source project that supports highly Reliable Distributed Coordination. It is trusted by many security companies around the world, including PagerDuty. It

12306 logic vulnerabilities in the image Verification Code selected in the new version cause the restriction to be bypassed (theoretically, the ticket grabbing software can be revived) The new image verification code is indeed more difficult than

MS15-034/CVE-2015-1635HTTP Remote Code Execution Vulnerability Analysis   Preface On patch day April, Microsoft fixed a remote code vulnerability MS15-034 in HTTP. SYS by marking a "high-risk" CVE-2015-1635 patch. According to Microsoft's

XML security you don't know0x00 XML Introduction XML eXtensible Markup Language, designed for data transmission and storage. Its diverse forms For example: 1. document Format (OOXML, ODF, PDF, RSS, docx ...) 2. image Format (SVG, EXIF Headers ,...)

LBE arbitrary number interception vulnerability and Solution LBE exports the blacklist, whitelist, and keyword interception databases to third-party programs in the form of ContentProvider without verifying the caller. As a result, the interception