Cloud Security

Free WIFI Remote Control of user behavior (Trojan shell theft of information) what are the potential risks of free WIFI webshell functions?Through netstat, I found that free wifi listens to port 6842. What is the reason for this port?

Analysis of Two Elevation of Privilege vulnerabilities found in Lenovo system updates Two Elevation of Privilege vulnerabilities in Lenovo's latest system update announcement were I submitted several weeks ago (CVE-2015-8109, CVE-2015-8110) IOActive

Adobe BlazeDS SSRF Vulnerability (CVE-2015-5255)Adobe BlazeDS SSRF Vulnerability (CVE-2015-5255) Release date:Updated on:Affected Systems: Adobe ColdFusion Adobe ColdFusion Adobe LiveCycle Data Services 4.7.x-4.7.0.354178Adobe LiveCycle Data

Chapter 6 security defense practices for iOS apps: files that cannot be destroyed Think of a common file system as a big notebook. When a file is deleted, many people think that this page is completely hacked with the trigger, just like the

NetFlow Analyzer Vulnerability (CVE-2015-4418)NetFlow Analyzer Vulnerability (CVE-2015-4418) Release date:Updated on:Affected Systems: ManageEngine Netflow Analyzer Description: Bugtraq id: 75068CVE (CAN) ID: CVE-2015-4418NetFlow Analyzer is

SSL/TLS LogJam mitm Security Restriction Bypass Vulnerability (CVE-2015-4000)SSL/TLS LogJam mitm Security Restriction Bypass Vulnerability (CVE-2015-4000) Release date:Updated on:Affected Systems: OpenSSL Project OpenSSL OpenSSL Project OpenSSL

Apple TV and iOS Local Security Restriction Bypass Vulnerability (CVE-2015-1062) Release date:Updated on: Affected Systems:Apple TV Apple iOS Description:Bugtraq id: 73003CVE (CAN) ID: CVE-2015-1062 IOS is an operating system developed by Apple

Oracle VM VirtualBox local vulnerabilities (CVE-2014-6590) Release date:Updated on: Affected Systems:Oracle VM VirtualBox Description:Bugtraq id: 72213CVE (CAN) ID: CVE-2014-6590 VirtualBox is a x86 virtualization product. Oracle VM VirtualBox

Release date:Updated on: Affected Systems:Cisco Unified Presence Server 8.6 (4)Description:--------------------------------------------------------------------------------Bugtraq id: 64551CVE (CAN) ID: CVE-2013-6983 Cisco Unified Presence is an

Release date:Updated on: Affected Systems:Open Web Analytics Description:--------------------------------------------------------------------------------Bugtraq id: 64774CVE (CAN) ID: CVE-2014-1206 Open Web Analytics is an Open source website

Release date:Updated on: Affected Systems:Adobe Shockwave Player Description:--------------------------------------------------------------------------------Bugtraq id: 65490CVE (CAN) ID: CVE-2014-0500 Adobe Shockwave Player is a software used to

Open Wifi SSID Broadcast vulnerability0x00 Preface A few days ago, I saw @ RAyH4c share an article about wifi phishing on Weibo. I thought it was good and I translated it. For the first translation, the level of English can only pass 4 levels. If

OS X OceanLotus (Hailian flower Trojan) On April 9, May 2015, researchers from Qihoo 360 published a research report on OceanLotus Trojans. In the report, they analyzed in detail the trojan that attacked Chinese organizations. The report also

Wapiti lightweight Web security vulnerability scanning tool and wapiti scanning toolWapiti is a Web application vulnerability check tool. It has a "dark box operation" scan, that is, it does not care about the source code of the Web application, but

Virus Trojan scan: A. NET-based research on "Hitting the bar" virusI. Preface: since the development of malicious programs, their functions have evolved from simple destruction to privacy spying, information theft, and even the very popular "Hitting

Surprise "fake FBI extortion", fictitious crime ransomwareRecently, Baidu security lab has discovered a series of ransomware viruses named "pseudo-FBI extortion" and their latest variants. The series of viruses will monitor users' running programs,

In Linux, how does one manage the encryption key best? Storing SSH encryption keys and remembering passwords can be a headache. Unfortunately, in today's years When malicious hackers and vulnerabilities are rampant, it is essential to take basic

Windows Hash and cracking   Overview 1.1 hash Hash is usually translated as "Hash", which is also directly translated as "Hash", that is, input of any length (also called pre- ing, pre-image ), the hash algorithm is used to convert an output with a

APK slimming notes for up to 53% Compression1. How do I think about this? APK is the file format of the Android installation package. This topic is a common topic. Many methods and rules have been summarized by our predecessors, including internal

WEB security: Introduction and solutions to XSS and SQL Injection Vulnerabilities1. Cross-site scripting (XSS) How XSS attacks work XSS, also known as CSS (Cross Site Script), is a Cross-Site scripting attack. It indicates that a malicious attacker