Cloud Security

QEMU 'FW _ cmd_write () 'function Remote Code Execution Vulnerability (CVE-2016-1714)QEMU 'FW _ cmd_write () 'function Remote Code Execution Vulnerability (CVE-2016-1714) Release date:Updated on:Affected Systems: QEMU Description: Bugtraq id:

QEMU DoS Vulnerabilities (CVE-2016-2858)QEMU DoS Vulnerabilities (CVE-2016-2858) Release date:Updated on:Affected Systems: QEMU Description: CVE (CAN) ID: CVE-2016-2858QEMU is an open source simulator software.If Qemu supports the PRNG backend,

Analysis of Hack With Chrome Extension 0x00 Introduction As we all know, Web applications are becoming more and more popular. Many of them use Web, such as lifestyle, office, and entertainment. Browsers are one of the most commonly used tools for

VMware vRealize Business cross-site scripting (CVE-2016-2075)VMware vRealize Business cross-site scripting (CVE-2016-2075) Release date:Updated on:Affected Systems: VMWare vRealize Business Advanced 8.x Description: CVE (CAN) ID: CVE-2016-2075

ABB Panel Builder 800 DLL hijacking Vulnerability (CVE-2016-2281)ABB Panel Builder 800 DLL hijacking Vulnerability (CVE-2016-2281) Release date:Updated on:Affected Systems: ABB Panel Builder 800 5.1 Description: CVE (CAN) ID:

Dropbear ssh crlf Injection Vulnerability in CVE-2016-3116)Dropbear ssh crlf Injection Vulnerability in CVE-2016-3116) Release date:Updated on:Affected Systems: Dropbear SSH Description: CVE (CAN) ID: CVE-2016-3116Dropbear SSH is a small SSH

Cert avl combined with cheetah for in-depth analysis of "Domino" malicious APP market apps Once, there was a malicious APP in front of me, and I didn't recognize it, I will not regret it until I download it, The most painful thing is, I don't

It's amazing that you can even recall your QQ message (unrepaired) 0x01Specific ideas:When chatting on a PC (windows,First, you need to close the colorful bubbles used in the QQ chat window,Then you send a message to the other party, right-click

Analysis of Petya extortion Trojan Recently, the security vendor G-Data released a report saying that a new extortion Trojan Petya was found. This trojan is characterized by first modifying the MBR Boot Sector of the system, then executing malicious

The malicious trojan virus is rampant. The Client virus has infected more than 70 thousand people. The malicious trojan virus is rampant. Can you hold your wallet? In the second half of 2015, the cheetah mobile security lab and the AVL mobile

The hacker virus will be poisoned just after the computer is turned on! In recent years, hackers have been cracking down their minds to make it easy and quick for users to infect computer viruses! Not only do you have to be proficient in all kinds

TDE encryption and Cracking Analysis of Microsoft SQL Server transparent data (II)General Data Encryption Everyone thinks that encryption is a good thing, but it does not take into account specific attack scenarios. This idea has become a trend, but

Analysis of SkidLocker using AES-256 Encryption Algorithm0 × 01 Overview The SkidLocker ransomware uses AES-256 encryption algorithms to encrypt different types of files by retrieving the content of the file information, and the ransom amount needs

About Web security, 99% of websites ignore these   Web security is a problem that cannot be emphasized. We find that many websites in China do not implement full-site https, and there are few practices for other security policies, the purpose of

Mysql error injection Principle Analysis (count (), rand (), group) 0x00 questions I have been using the mysql database to report an error injection method, but why does it report an error? Baidu, Google, knows about it and finds that everyone

Fifth Report: China Insurance Radmin weak password control Business Core System/Intranet penetration I am sorry for five consecutive

An HTTP header injection vulnerability exists in 51CTO. Injection Point user-agentGET/rizhi2/count. php? & Amp; counturl = Require HTTP/1.1Host: logs.51cto.comUser-Agent: 1 *Referer: http://network.51cto.com/Cookie: www51cto = 612C2DAFB24CA6BCF7696B2

Analysis of the implementation and Prediction Techniques of the rand function in the glibc Library Thanks to 0CTF, I held a very deep CTF competition at Jiaotong University.This competition has a web question. The question is very simple and is

2345 filtering is required for SQL injection of a substation 2345 SQL Injection for a substation 2345 grand League union.2345.comInjection PointHttp://union.2345.com/jifen/mall/index.php? Category = & priceArea = & sendto = 1% 27% 20and % 20% 271% 27

Domain penetration-Analysis of Hook passwordchangenoworkflow 0x00 Preface In the previous article, we introduced two methods for maintaining domain control permissions-SSP and Skeleton Key. Both methods need to be implemented by Mimikatz, and there