Cloud Security

Is it safe to connect without USB flash drives? Hackers can use sonic to attack your hard disk and sonic Is it safe to connect without USB flash drives? Hackers can use acoustic waves to attack your hard disk. Attackers can use acoustic waves to

GitHub suffered a maximum of 1.35 Tbps DDoS attacks in history Github, the largest code distribution platform, suffered a series of large-scale distributed denial of service (DDoS) attacks on Wednesday. In the first phase of the attack, Github's

PostgreSQL insecure temporary File Creation Vulnerability (CVE-2018-1053)PostgreSQL insecure temporary File Creation Vulnerability (CVE-2018-1053) Release date:Updated on:Affected Systems: PostgreSQL Description: Bugtraq id: 102986CVE (CAN)

Samba SMB Client Spoofing Vulnerability (CVE-2016-2115)Samba SMB Client Spoofing Vulnerability (CVE-2016-2115) Release date:Updated on:Affected Systems: Samba Samba 4.x-4.2.11Samba Samba 4.4.x-4.4.2Samba Samba 4.3.x-4.3.8Samba Samba 3.x Description:

Cisco TelePresence Server Denial of Service Vulnerability (CVE-2015-6312)Cisco TelePresence Server Denial of Service Vulnerability (CVE-2015-6312) Release date:Updated on:Affected Systems: Cisco TelePresence service 3.1 Description: CVE (CAN)

Apache Struts 2 remote code execution vulnerability in CVE-2016-0785)Apache Struts 2 remote code execution vulnerability in CVE-2016-0785) Release date:Updated on:Affected Systems: Apache Group Struts2 2.0.0 - 2.3.14.1 Description: CVE (CAN) ID:

What does a comprehensive ECs security solution look like? For many enterprise users, as ECs replaces traditional servers and carries Internet services closely related to the survival and development of enterprises, this makes users' questions about

How can we prevent Windows command line tools from being abused by hackers? By default, various commands are installed in Windows, but only a small part of them are actually used by common users. JPCERT/CC also finds that attackers use Windows

Free WIFI Remote Control of user behavior (Trojan shell theft of information) what are the potential risks of free WIFI webshell functions?Through netstat, I found that free wifi listens to port 6842. What is the reason for this port?

Multiple Security Vulnerabilities in Mozilla Firefox/ThunderbirdMultiple Security Vulnerabilities in Mozilla Firefox/Thunderbird Release date:Updated on:Affected Systems: Mozilla Firefox Mozilla Thunderbird Description: Bugtraq id: 75541CVE (CAN)

U-Mail system injection (SQL Injections in MySQL LIMIT clause case) SQL Injections in MySQL LIMIT clause, which happens to be a defect in the email system. This is a case study. The administrator password can be obtained through injection. The cause

Sogou Browser Remote Command Execution This time, sogou made targeted changes to multiple points in the previous vulnerability, but some points still lacked consideration. This allows us to continue to bypass sogou's repair measures and implement

Measure the test taker's knowledge about a vulnerability in TCL. Internal network penetration Teaching: internal network information detection and post-penetration preparation I was planning to send the message to Renren, but what I was forced to do

Deep Learning: It can beat the European go champion and defend against malware     At the end of last month, the authoritative science magazine Nature published an article about Google's AI program AlphaGo's victory over European go, which

One layer stripped your mind: Decoding the ZeuS online banking trojan in "Deep disguise" At the very beginning, I receive a block of diaoyumail with A. Doc attachment. We took off the camouflage coat of the ZeuS Trojan step by step using the usual

APK slimming notes for up to 53% Compression1. How do I think about this? APK is the file format of the Android installation package. This topic is a common topic. Many methods and rules have been summarized by our predecessors, including internal

Redis unauthorized password-free login with SSH and repair solutions  Reading: 602 The author of this article will show you what Redis is, and learn about common Key operation commands and configuration commands of redis clients Redis-cli, Redis

Information fusion technology in the field of internal threat detection based on multi-Domain Information FusionPreface Here, I would like to give my friends from FreeBuf a good old age and wish them a happy monkey year! As the first article of the

Zhiyuan A8-V5 collaborative management software normal user Arbitrary File Upload (kill V5) These days have been pondering far A8-V5, yesterday found a few small problems, today further mining Arbitrary File Upload Vulnerability. Zhiyuan A8-V5

SDN and cloud security challenges-important role of visibility SDN is designed to transform modern networks and data centers into highly agile frameworks that can be quickly reconfigured based on changing business needs. Although SDN is still