Cloud Security

Honeywell 93gas Detector Path Traversal Vulnerability (CVE-2015-7907) Affected Systems: Honeywell Midas gas detectors Honeywell Midas Black gas detectors Description: CVE (CAN) ID: CVE-2015-7907 Midas and Midas Black gas detectors are detectors

ISC Kea DoS Vulnerability (CVE-2015-8373)ISC Kea DoS Vulnerability (CVE-2015-8373) Release date:Updated on:Affected Systems: ISC Kea 1.0.0-betaISC Kea 0.9.2 Description: CVE (CAN) ID: CVE-2015-8373Kea is an open-source DHCPv4 and DHCPv6 server

FFmpeg ff_dwt_decode Function Denial of Service Vulnerability (CVE-2015-8662) Affected Systems: FFmpeg Description: CVE (CAN) ID: CVE-2015-8662FFmpeg is a free software that allows you to perform video, transfer, and stream functions in

Python-django date template filter information leakage Vulnerability (CVE-2015-8213)Python-django date template filter information leakage Vulnerability (CVE-2015-8213) Release date:Updated on:Affected Systems: Django Description: CVE (CAN) ID:

Oracle Sun ILOM component Remote Vulnerability (CVE-2015-4915)Oracle Sun ILOM component Remote Vulnerability (CVE-2015-4915) Release date:Updated on:Affected Systems: Oracle Sun Systems Products Suite 3.2Oracle Sun Systems Products Suite 3.1Oracle

PostgreSQL crypt Function Denial of Service Vulnerability (CVE-2015-5288)PostgreSQL crypt Function Denial of Service Vulnerability (CVE-2015-5288) Release date:Updated on:Affected Systems: PostgreSQL PostgreSQL 〈 9.0.23PostgreSQL PostgreSQL 9.4.x -9.

Analysis of Drag and Drop security policies in IE sandbox 0x00 Preface Internet Explorer sandbox escape is an important topic in Internet Explorer security research. One type of vulnerability uses the defects of the white list program in

Remote Control Trojan analysis report of "shadow stealing" I. Overview After feedback from multiple users, a scammers lied about trading game equipment and sent the compressed package to induce them to click "Images ". In the actual transaction

Malicious behavior of porn virus Phantom Killer and analysis of black product interest chain 0x00 Overview Recently, the Alibaba mobile security team found that a large number of pornographic viruses have begun to flood in some forums or

Https provides Secure web communication 1. principles: 1) Understanding encryption algorithms: Classification of encryption algorithms: symmetric encryption and asymmetric encryption. symmetric encryption: encryption and decryption use the same key.

Weak Password of China Unicom customer Ticket System in a region (customer data leakage) Yanji Unicom customer service e-ticket system http ://**.**.**.**/ The password of the account zhangjie is 123456The Customer Management Office involves more

Six basic policies that need to be understood before building a cloud security system     Cloud adoption is unstoppable, but an endless stream of security events also put an important issue in front of every CIO and Security Department-in a more

Leakage of sensitive information in the market leads to intranet roaming I read two articles about the vulnerabilities in the market on wooyun, in the spirit of professionalism.I scanned the market again and found that there were still more than N

CmsTop media edition template has three SQL blind Injection Vulnerabilities Not all websites have these templates installed. This template is generally used by users. The vulnerability file is in/apps/rss/controller/fullsite. php.Public function get_

2345 security guard Driver Exploitation Vulnerability 2345 a driver of Security Guard has the arbitrary address Write vulnerability that can be Elevation of Privilege. 2345 the IRP_MJ_DEVICE_CONTROL distribution routine of a security guard driver

Introduction to configurations related to preventing SQL injection attacks in Nginx The best way to prevent SQL injection is to filter and escape all data submitted to the background.For simple cases, such as single quotation marks ('), semicolons (;

DVWA Series 7 low-level Command Execution Vulnerability Next, we will analyze the Command Execution vulnerability in DVWA.First, set DVWA Security to Low and SELECT Command Execution. Enter an IP address in the text box. Click Submmit to submit and

Crawler combined with sqlmapi judgment Injection Recently, I am working on something that hurts. crawlers and scanning. The scan is sent to sqlmapapi. Currently, there are not many materials, but you can still find some Use sqlmapapi. py batch scan

PHP: eight security-related functions Security issues are an important part of programming languages. In almost any practical language, some functions, modules, or other functions are provided to ensure security. In the modern Internet, we often

CTF organizer's guide against zombies 0x00 background XDCTF2015 is a CTF that I think is very powerful. The problem is moderately difficult and there is nothing wrong with it. It has ended successfully. CTF has always been easy to get confused.