Cloud Security

WinRAR SFX v5.21 Remote Code Execution VulnerabilityWinRAR SFX v5.21 Remote Code Execution Vulnerability Release date:Updated on:Affected Systems: WinRar WinRar 5.21 Description: WinRAR is a popular compression/decompression tool.The Text and Icon

NTP Multiple Arbitrary File Overwrite Vulnerability (CVE-2015-5196)NTP Multiple Arbitrary File Overwrite Vulnerability (CVE-2015-5196) Release date:Updated on:Affected Systems: NTP 4.x Description: Bugtraq id: 76476CVE (CAN) ID:

The OpenSSH bug exposes the system to brute force cracking attacks. OpenSSH is widely used to remotely access computers and servers. Usually, OpenSSH allows three or six logon attempts before closing the connection. However, Kingsley, a security

Cisco IOS Software DoS Vulnerability (CVE-2015-4203)Cisco IOS Software DoS Vulnerability (CVE-2015-4203) Release date:Updated on:Affected Systems: Cisco IOS 12.2SCH Description: Bugtraq id: 75339CVE (CAN) ID: CVE-2015-4203Cisco IOS is an

Cisco IM and Presence Service SQL Injection Vulnerability (CVE-2015-4222)Cisco IM and Presence Service SQL Injection Vulnerability (CVE-2015-4222) Release date:Updated on:Affected Systems: Cisco uniied Communications Manager IM and Presence Ser 9.1

HP-Plugin Remote Code Execution Vulnerability (CVE-2015-0839)HP-Plugin Remote Code Execution Vulnerability (CVE-2015-0839) Release date:Updated on:Affected Systems: HP-Plugin Description: Bugtraq id: 74913CVE (CAN) ID: CVE-2015-0839This is HP

Security Science: common methods of LAN attacks Disclaimer: This site provides security tools and procedures (methods) that may be offensive and only for security research and teaching. You are at your own risk! When talking about network attacks,

Rogue DHCP server Intranet attack test Intranet penetration is usually Based on ARP attacks, but ARP attacks are too costly to the Intranet and are easy to detect. Today we are talking about DHCP-based attacks. DHCP-based attacks are easy to

Study on Defects of super Cannon (Great Cannon) TTL     Some time ago, Github suffered a massive DDoS attack, followed by fierce discussions behind The scenes. Then, American media accused China of possessing a cyber weapon-The super Cannon )". Is

Interpreting "Redirect SMB" Attacks A few days ago, Cylance released a vulnerability that affects Windows systems. Attackers can redirect to the SMB protocol and use man-in-the-middle attacks to steal user authentication information. What is this

How to Prevent 1024-bit Diffie-Hellman from being cracked On Wednesday, Researchers Alex Halderman and Nadia Heninger proposed that NSA has been able to decrypt a large number of HTTPS, SSH, and VPN connections by attacking a 1024-bit prime number

Dr. Peng's account and password of the Background Service Department of the Telecommunications Media Group (Barley set-top box) are leaked. Dr. Peng's account and password of the Background Service Department of the barley set-top box of China

Fanwe O2O commercial system SQL injection vulnerability + XXE entity Injection Fanwe O2O, demo site address: http://o2odemo.fanwe.net//cpapi/qxtapi.php define("FILE_PATH","/cpapi");require_once '../system/system_init.php';$ip = CLIENT_IP;$xml = file_

A website in COFCO has the SQL Injection Vulnerability (more than 800 tables can be retrieved from the database) COFCO Trade Business Management System: http: // 219.143.252.178/. The SQL injection vulnerability exists. Through injection, more than 8

ShopEx multiple employees have insufficient security awareness to leak internal business information The email addresses of the following employees have weak passwords, including hr. Hr Shopex123Chenminrui Shopex123Huhao Shopex123Lihuatian Shopex12

Severe logical vulnerabilities in p2p financial security Kingletter Network (http://www.jinxin99.cn) in the p2p financial industry seems to be the top 50, password retrieval function has design defects, resulting in the reset of any user password. 1

Toutiao.com's penetration test (small movies are highlighted) Toutiao.com Test it.1. Information Collection:Direct Weibo  http://s.weibo.com/user/&work=%25E4%25BB%258A%25E6%2597%25A5%25E5%25A4%25B4%25E6%259D%25A1   Found the name + QQ + mail about 2

Samsung Default Input Method Remote Code Execution Remote Code Execution as System User on Samsung PhonesSummary allows attackers to remotely execute Code and have system privileges by using the update method provided by Samsung to hijack your

The Z-blog front-end does not require logon. One vulnerability is included. I heard this is a big vendor? -.-You do not need to log on to the front-end to include the vulnerability. You probably did not see the location where images could be

DOS/DDOS Summary (This article is based on the online materials and the author's own understanding. It is only for learning and should not be used for illegal purposes. If your rights and interests are inadvertently infringed, please contact me in