Cloud Security

Libxml2 dict. c Denial of Service Vulnerability (CVE-2015-8806)Libxml2 dict. c Denial of Service Vulnerability (CVE-2015-8806) Release date:Updated on:Affected Systems: Libxml libxml2 Description: Bugtraq id: 82071CVE (CAN) ID:

CVE-2016-1757 simple analysis 0x00 Abstract The latest 10.11.4 patch fixes a vulnerability that exploits conditional competition to Obtain Code Execution permissions. After understanding the kernel source code and poc, the vulnerability is analyzed

Pro-face GP-Pro ex hmi Vulnerability (CVE-2015-7921)Pro-face GP-Pro ex hmi Vulnerability (CVE-2015-7921) Release date:Updated on:Affected Systems: Proface GP-Pro EX 1.00-4.0.4Proface GP-Pro EX Description: CVE (CAN) ID: CVE-2015-7921Pro-face

Siemens SCALANCE S613 Denial of Service Vulnerability (CVE-2016-3963)Siemens SCALANCE S613 Denial of Service Vulnerability (CVE-2016-3963) Release date:Updated on:Affected Systems: Siemens SCALANCE S613 Description: CVE (CAN) ID:

How to Use FSEvents to detect and delete malicious files on the OS X Platform FSEvemts that supports OS X 10.7 and later versions introduces a function that can detect file directory modification behaviors. FSEvents can use the data provided by the

IBM WebSphere Process Server access Restriction Bypass Vulnerability (CVE-2015-7454)IBM WebSphere Process Server access Restriction Bypass Vulnerability (CVE-2015-7454) Release date:Updated on:Affected Systems: IBM WebSphere Process Server 6.1.2.0 －

Use WinDbg to debug Windows Kernel Process Analysis If you can check the operating system's internal working process, it will be a powerful capability. Some advanced malware share the kernel as a common goal, and many of the most powerful

Centos boot Custom Script Sometimes we need to set a script on the server so that it can be started as soon as it is turned on. The method is as follows: Cd/etc/init. dviyoushell. sh # Change youshell. sh to your own script name. Write your own

Introduction to Petya At the end of last month, Germany's veteran security vendor, Goethe-tower, issued a security report that a new extortion trojan named Petya emerged. So what exactly is this new extortion Trojan?0x01 Trojan OverviewThe trojan

SQL Injection-how do I break through an Internet company step by step Recently, I have been studying Web security-related knowledge, especially SQL injection. Some tools related to SQL injection are introduced. I am bored at home on weekends. I want

Salsa in Petya: defects caused by algorithm Modification Previously, the harbo analysis system introduced the trojan Petya about modifying MBR for disk encryption extortion. Recently, Leo Stone provides a complete brute-force code and decryption

A SQL injection vulnerability in yihu network can be combined (1.3 million user information) http://m.yiihuu.com/zyxz/?q=1 sqlmap resumed the following injection point(s) from stored session:---Parameter: q (GET) Type: boolean-based blind

About Web security, 99% of websites care about this. Web security is a problem that cannot be emphasized. We find that many websites in China do not implement full-site https, and there are few practices for other security policies, the purpose of

Conspiracy analysis behind the phone call Every one of us has suffered from harassing calls, sales promotions, and financial management. The "one voice" harassing call account for a large proportion. According to incomplete statistics, all the phone

P2P financial security-the main site of jingjinlian has the SQL Injection Vulnerability (ROOT)   Objective: www.jjlwd.comSQL Injection exists in the following areas: (endTime in POST, time blind injection)  POST

P2p financial security: SQL Injection in a website of yonglibao (with verification script) It is useless to filter single quotes.   http://m.yonglibao.com/Event/V3ReComment/inviteList?userId=(select * from (select (sleep(5)))x) Delayed Injection is

Application Truecaller remote exploitation vulnerability involving Android 0.1 billion Security researchers at the cheetah mobile security research lab found a serious vulnerability in the call management application Truecaller. FreeBuf encyclopedia

An interface for password verification in Meituan can be cracked (affecting Meituan merchants and Meituan take-out merchants) An interface for password verification in Meituan can be cracked (hundreds of merchant accounts can be successfully logged

A storage-type XSS of Sina SAE can be targeted at applications (Browser User-Agent) Reference wooyun-2010-066189, not strict repair Sina sae log center real-time log function storage XSSIn the wooyun-2010-066189, xss is placed on the link to the

A command execution vulnerability exists in an important system of skyworth. You need to delete the shell and upgrade it. No one submitted it, which is very dangerous. Vulnerability addresses: http://skyhome.skyworthbox.com/Skyworth smart Router