Cloud Security

Java deserialization vulnerabilities (CVE-2015-6420) for Cisco products)Java deserialization vulnerabilities (CVE-2015-6420) for Cisco products) Release date:Updated on:Affected Systems: Cisco Unified Computing Cisco Voice and Unified Communications

Kerberos protocol vulnerability: The system is completely controlled. Recently, security experts have discovered a "very destructive" vulnerability in Windows's Kerberos Authentication System. Last year, a similar vulnerability in the system was

From the green software alliance sub-station to the fall of the server Due to the Administrator's negligence and unreasonable permission control, the server fellDetailed description: Ftp://m.xdowns.com/Account: mPassword: mFirst, the FTP weak

Google Chrome FontData: Bound Function Integer Overflow Vulnerability (CVE-2015-6781)Google Chrome FontData: Bound Function Integer Overflow Vulnerability (CVE-2015-6781) Release date:Updated on:Affected Systems: Google Chrome Description:

Android Wi-Fi information leakage Vulnerability (CVE-2015-6629)Android Wi-Fi information leakage Vulnerability (CVE-2015-6629) Release date:Updated on:Affected Systems: Android Description: CVE (CAN) ID: CVE-2015-6629Android is a mobile phone

NVIDIA 3D Driver Privilege Escalation Vulnerability (CVE-2015-7865)NVIDIA 3D Driver Privilege Escalation Vulnerability (CVE-2015-7865) Release date:Updated on:Affected Systems: Nvidia gpu Graphics Driver R358-358.87Nvidia gpu Graphics Driver R352-3

Libsndfile Heap Buffer Overflow Vulnerability (CVE-2015-7805)Libsndfile Heap Buffer Overflow Vulnerability (CVE-2015-7805) Release date:Updated on:Affected Systems: libsndfile libsndfile 1.0.25 Description: CVE (CAN) ID: CVE-2015-7805Libsndfile is

Oracle Retail Applications Remote Security Vulnerability (CVE-2015-4827)Oracle Retail Applications Remote Security Vulnerability (CVE-2015-4827) Release date:Updated on:Affected Systems: Oracle Retail Applications 3.0 Description: CVE (CAN) ID:

HP ArcSight Elevation of Privilege Vulnerability (CVE-2015-6030)HP ArcSight Elevation of Privilege Vulnerability (CVE-2015-6030) Release date:Updated on:Affected Systems: HP ArcSight Logger 6.0.0.7307.1 Description: CVE (CAN) ID:

Sniffly: Uses HSTS and CSP to sniff browser history     Sniffly is an attack by using HSTS (HTTP Strict Transport Security) and Content Security Policy (Content Security Policy). It allows any website to sniff the user's browser history. This

How advanced hackers find Network Security Vulnerabilities   Hackers always want to know as much information as possible, such as whether to connect to the Internet, the internal network architecture, and the status of security measures. Once

Modbus TCP traffic analysis Modbus protocol Modbus is the world's first bus protocol for industrial field use. ModBus uses Master/Slave (Master/Slave) communication. A maximum of 247 slave controllers are supported, but the number of actually

The concept of "man" is not earth, "Fire Fighting" is fierce, and President Tan's methodology | focus on hackers and geeks This series of articles is produced by Ann in the new information security media. Any opinion or position in the interviews is

Analysis of Drag and Drop security policies in IE sandbox 0x00 Preface Internet Explorer sandbox escape is an important topic in Internet Explorer security research. One type of vulnerability uses the defects of the white list program in

Identity Mixer, an IBM encryption tool platform, has been available to developers recently. First, this is good news for many developers. Developers are now able to encrypt important data on apps developed at the enterprise level. Identity Mixer is

Multiple csrf sites Detailed description: 1. The website has multiple csrf vulnerabilities, such as modifying personal information and changing the shipping address. Modify the shipping address to modify the address. Modify the mobile phone address

DockerMaze maze challenge write-up November 16 this year ~ On the 17th, in Dockercon eu 2015 held in barsarona, Schibsted Team released a DockerMaze challenge, which is similar to the game running out of the maze in 1990s. In this game, you wake up

Joomla Sqli Vulnerability Analysis I. Vulnerability Analysis the code triggered by the vulnerability is in the/administrator/components/com_contenthistory/models/history. php and getListQuery () functions:Through SQL and error message, we can know

A server of Tucson may leak dozens of Gbit/s of source code and dozens of Gbit/s of data due to improper configuration. Due to improper configuration at a certain place, the network has unauthorized access, resulting in leakage of dozens of GB code

How CSRF generates tokens to prevent attacks In the past, we talked about CSRF and the principle of CSRF attacks. This article describes how to prevent CSRF and the encryption principles and implementation examples behind Token Generation. 1. Token