Cloud Security

Those who know Data Encryption technology are sure to be confident in its ability to protect the security of data sources. Because of the direct effect on data, even if the data is lost or stolen in the security crisis, encryption protection can

Oracle VM VirtualBox local vulnerabilities (CVE-2014-6590) Release date:Updated on: Affected Systems:Oracle VM VirtualBox Description:Bugtraq id: 72213CVE (CAN) ID: CVE-2014-6590 VirtualBox is a x86 virtualization product. Oracle VM VirtualBox

WordPress 'comment' field HTML Injection Vulnerability Release date:Updated on: Affected Systems:WordPressDescription:Bugtraq id: 71237 WordPress is a blog platform developed in PHP. you can build your own website on servers that support PHP and

Symantec pcAnywhere Insecure File Permission Vulnerability Release date:Updated on: Affected Systems:Symantec pcAnywhere 12.xDescription:--------------------------------------------------------------------------------Bugtraq id: 51593Cve id: CVE-20

McAfee Vulnerability Manager 'cert _ cn' Parameter Cross-Site Scripting Vulnerability Release date:Updated on: 2013-03-11 Affected Systems:McAfee Vulnerability Manager 7.5Description:-------------------------------------------------------------------

Release date: 2010-08-23Updated on: 2010-09-03 Affected Systems:Wireshark 1.2.0-1.2.9Wireshark 0.10.8-1.0.14Unaffected system:Wireshark 1.2.10Wireshark 1.0.15Description:--------------------------------------------------------------------------------

A security researcher found a vulnerability affecting the Linux operating system in the Cisco Unified Video Conferencing system (uniied Videoconferencing system. These vulnerabilities allow attackers to access the video conferencing device and steal

Release date:Updated on: Affected Systems:Citrix Presentation Server 4.5Citrix XenApp 6.5Citrix XenApp 6.0Citrix XenApp 5.0Citrix XenApp 4.5Description:--------------------------------------------------------------------------------Bugtraq id: 53663

Release date:Updated on: Affected Systems:IBM WebSphere DataPower XC10 V2.1.0.0-V2.1.0.2.IBM WebSphere DataPower XC10 V2.0.0.0-V2.0.0.3.Description:--------------------------------------------------------------------------------Cve id: CVE-2012-5756

Release date:Updated on: Affected Systems:Open Web Analytics Description:--------------------------------------------------------------------------------Bugtraq id: 64774CVE (CAN) ID: CVE-2014-1206 Open Web Analytics is an Open source website

The high-risk OpenSSL vulnerability Heartbleed published in April 7 has become the leading news of IT security for two consecutive weeks. Now IT experts are arguing about the impact of the vulnerability and the cost of fixing the vulnerability: To

Heartbleeder can detect OpenSSL CVE-2014-0160 Vulnerability (heartbleed vulnerability) on your server ). What is a heartbleed vulnerability? CVE-2014-0160, heartbleed vulnerability, is a very serious OpenSSL vulnerability. This vulnerability allows

Virus Trojan scan: A. NET-based research on "Hitting the bar" virusI. Preface: since the development of malicious programs, their functions have evolved from simple destruction to privacy spying, information theft, and even the very popular "Hitting

Ransomware CoinVault: Get the money and give you a chance to restore the file Restore a file for free Recently, a new software named CoinVault ransomware, which uses 256-bit AES to encrypt the victim's hard disk. The software has a similar interface

UACUser Account Control) is a new technology referenced by Microsoft in Windows VISTA and Windows 7. Its main function is to perform operations that affect system security, UAC is automatically triggered and can be executed only after confirmation

WebShell series (1) -- XML I would like to think about it as a series. Although webshell is still a rare practice in all kinds of advanced times. Basically, some new webshells, special exploitation in special environments, and conversion scripts for

In api/sms_idcheck.php, there is a code for mobile phone number authentication. If this authentication is faulty, you can bypass it and bring the controllable input to the SQL statement. If ($ mobile) {if (! Preg_match ('/^ 1 ([0-9] {9})/', $ mobile)

Sniffer is a powerful protocol analysis software launched by NAI, it can capture network traffic for detailed analysis, monitor network activities in real time, use expert analysis system to diagnose problems, and collect Network Utilization and

In the previous article, we will introduce anti-simulation technologies commonly used by malware to readers. In this article, we will introduce various anti-Debugging techniques used by malware to impede reverse engineering, so as to help readers

Recently, the promotion of "cloud security" has become the focus of the industry. What is cloud security? The concept of "cloud security" comes from "cloud computing". It can be said that "cloud security" is the application of "cloud computing"