Cloud Security

Huawei HG532 remote code execution vulnerability in CVE-2017-17215)Huawei HG532 remote code execution vulnerability in CVE-2017-17215) Release date:Updated on:Affected Systems: Huawei HG532 Description: Bugtraq id: 102344CVE (CAN) ID: CVE-2017-

Stay away from the eight basic principles of viruses and the eight principles 1. establish good security habits, such as: Do not open emails or attachments with unknown experience, do not use websites that do not know much about, and do not execute

Apache Tomcat HTTP_PROXY environment variable Security Vulnerability (CVE-2016-5388)Apache Tomcat HTTP_PROXY environment variable Security Vulnerability (CVE-2016-5388) Release date:Updated on:Affected Systems: Apache Group Tomcat Description: CVE

Qemu vga module Arbitrary Code Execution Vulnerability (CVE-2016-3710)Qemu vga module Arbitrary Code Execution Vulnerability (CVE-2016-3710) Release date:Updated on:Affected Systems: QEMU Description: CVE (CAN) ID: CVE-2016-3710QEMU is an open

Linux kernel xt_alloc_table_info DoS Vulnerability (CVE-2016-2550)Linux kernel xt_alloc_table_info DoS Vulnerability (CVE-2016-2550) Release date:Updated on:Affected Systems: Linux kernel 〈 4.5 Description: CVE (CAN) ID: CVE-2016-2550Linux Kernel

LibTIFF putcontig8bitCIELab Function Denial of Service Vulnerability (CVE-2015-8683)LibTIFF putcontig8bitCIELab Function Denial of Service Vulnerability (CVE-2015-8683) Release date:Updated on:Affected Systems: LibTIFF 4.0.6LibTIFF Description:

Analysis of QQ simulated login implementation It was originally issued together with the previous article. Later, it was put on hold.I'm glad to have been involved in the discussion and discussion. (B) slot (4). In fact, I don't have any advanced

Apple iOS HTTPProtocol remote code execution vulnerability in CVE-2015-8659)Apple iOS HTTPProtocol remote code execution vulnerability in CVE-2015-8659) Release date:Updated on:Affected Systems: Apple iOS Description: CVE (CAN) ID: CVE-2015-86

Comments: Information security is very important for modern enterprises. Today, many enterprises (including some security experts) have chosen the so-called shortcuts when dealing with security issues. This situation is worrying. There are many

Comments: 1. Principle of illegal Password acquisition: the Edit Control is a standard control in Windows. When the Password attribute is set to True, the input content is blocked as asterisks, to achieve the purpose of protection. Although we all

Comments: Radmin is a very good server management, whether it is remote desktop control or file transmission speed is very fast and very convenient. This also forms a lot of servers installed such as radmin. Now you say that the default port 4899

Comments: I am a super software fan. I am online every day. I like to download, install, and try some new software. I often find some useful software to improve my work efficiency, however, during the process of downloading and trying out the

Xiaomi App Store design defects have man-in-the-middle risks Xiaomi app store can be attacked by man-in-the-middle to leak informationTesting System miui 7 6.2.18 development Edition Xiaomi app store does not verify whether the SSL certificate is

About Web security, 99% of websites care about this. Web security is a problem that cannot be emphasized. We find that many websites in China do not implement full-site https, and there are few practices for other security policies, the purpose of

P2P financial security-OK loan-SQL Injection for a website Injection Data: POST/website/abouts/deleteaboutsremove HTTP/1.1 Host: mail.okdai.com: 8888User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv: 38.0) Gecko/20100101 Firefox/38.0 Accept:

Tangscan plug-in for SQL Injection on a site in Suzhou Tongcheng 666 The SQL injection plug-in of Tangscan 666 from a website in Suzhou Tongcheng. waf is not omnipotent, and it cannot be used without waf. Artifact: SQL Injection Vulnerability in

The Internet has started a new career: econnoisseurs" 0x00 Introduction Once upon a time, the Internet became interested in the word "econnoisseurs" and began a new career: "econnoisseurs ". The current occupation has penetrated into all aspects of

Introduction and Analysis of Squid Remote Denial of Service Vulnerabilities [Overview] Squid Cache is an HTTP Proxy server software. Squid is widely used and can be used as a cache server. It can filter traffic to help with network security. It can

[IOS 11 Security Vulnerabilities] Apple Siri was exposed to privacy vulnerabilities: screen lock notifications were directly read, and siri was exposed [IOS 11 Security Vulnerabilities] Apple Siri was exposed to a privacy vulnerability: the screen

Analysis and Research on channel advertisement SDK0x00 background This year's 3.15 gala on CCTV revealed that taoyoutech had inexplicably deducted fees for mobile phone users by pushing malicious programs, attracting high attention from mobile