Cloud Security

China Resources Shuanghe roaming from mailbox to Group intranet Account Design ProblemsDetailed description: The problem started with: https://webmail.dcpc.com/owa/ (China Resources Shuanghe Mail System)Outlook mailbox, can be cracked, get more than

OpenSSH ssh_packet_read_poll2 Function Denial-of-Service Vulnerability (CVE-2016-1907)OpenSSH ssh_packet_read_poll2 Function Denial-of-Service Vulnerability (CVE-2016-1907) Release date:Updated on:Affected Systems: OpenSSH Description: CVE

CVE-2015-3795   Http://blog.wuntee.sexy/CVE-2015-3795/ 0x00 background This vulnerability was reported to Apple in June 4. This vulnerability was fixed in the 10.10.5 security update released on April 9, August 13. Related information:Apple

A Zoomla system vulnerability causes Server Control A Zoomla system vulnerability causes the server to be controllable (You have logged on to Zoomla's email address and the official old forum administrator account)A series of problems caused by the

Linux malware analysis and learning skills Linux malware should be very small compared to windows, In the http://malwaredb.malekal.com/virus library site in dozens of hundreds of virus samples will appear in a linux sample. I will summarize and

This malicious program can turn your computer into a Proxy Server Security CompaniesPalo Alto NetworksResearchers have discovered a new malicious program family ProxyBack, which can turn infected computers into proxy servers. Malware targets

How to Use machine learning to detect malware Comprehensive research on malware is not a simple task. Before performing reverse engineering and building a timeline, researchers need to obtain a large number of samples from multiple stages of malware

Malicious Software Analysis Using RTF files as transmission Vectors During the analysis of malware, we often see that attackers use features to transmit and confuse malware in an innovative way. Recently, we found that the number of samples that use

CSAW2015 finals: Use vDSO rewrite to bypass SMEP This year's CSAW finals had several good kernel challenges. Today we are addressing the StringIPC from Michael Coppola. Our experimental environment is the 64-bit ubuntu 14.04.3 Virtual Machine of

General automatic shelling Method for Android applications 0x00 background and significance Compared with traditional PC applications, Android applications are more likely to be reversed, because after being reversed, Java code or smali

The JAVA deserialization Command executed by the Chinese enterprise has been Getshell RT Http: // 121.14.65.32: 8080/building.htmlEnterprise-centric!Jboss middleware, which has the latest JAVA deserialization command execution

Baidu has SQL injection vulnerability ROOT permission In the test tool, the effect is okay. Pai_^--------------------------------# The first time in the Tang Dynasty # the launch of the security cruise Conference of the Tang Dynasty !!!On September

An SQL injection vulnerability exists in a station in the truck House (DBA permission + 0.4 million user data) An SQL injection vulnerability exists in a station in the truck house Injection

Weak Lily net password causes a large amount of internal employee information leakage Weak passwords on a platform of Lily net cause a large amount of internal employee information leakagePS: President, what are the targets? Http://oa.baihe.com: 3220

Unauthorized access to the East China Sea airline foc System (leakage of a large amount of sensitive aviation data) Link: http ://**.**.**.**Under normal circumstances, login verification is required:  Crawlers in Baidu find that the download

Node. js Remote Memory leakage Vulnerability Recently, vulnerabilities have been found in the ws module that allows users to simply send ping data frames to allocate memory. This vulnerability will reject data sending requests and invalidate the

DVWA series 13 Brute Force code analysis and defense I have analyzed the low-level Brute Force code before. Next I will analyze the medium and high-level Code respectively.Medium-level code:Obviously, we can see the difference between medium and low.

A Java deserialization command execution vulnerability in Digital China can be found in GETSHELL. Getshell is supported. The database configuration information is hard-coded and connected to the database successfully. There is a risk of information

Yonyou FE collaborative Office Platform System Union Injection Vulnerability A system of UFIDA does not strictly filter the data, resulting in union injection. Arbitrary data can be obtained. The yonyou FE collaborative office system does not

Chinese small and medium enterprises (SME) Web blockout # vulnerabilities cause 10828 enterprise accounts to log on to publish recruitment information Ten thousand eight hundred and twenty-eight enterprise member accounts can be logged on at will,