Cloud Security

Linux kernel snd_usbmidi_create DoS Vulnerability (CVE-2016-2384)Linux kernel snd_usbmidi_create DoS Vulnerability (CVE-2016-2384) Release date:Updated on:Affected Systems: Linux kernel 〈 4.5 Description: CVE (CAN) ID: CVE-2016-2384Linux Kernel is

Huawei Mate S integer overflow vulnerability in CVE-2016-1495)Huawei Mate S integer overflow vulnerability in CVE-2016-1495) Release date:Updated on:Affected Systems: Huawei Mate S Huawei Mate S Huawei Mate S Huawei Mate S Description: CVE

HPE Asset Manager Arbitrary Code Execution Vulnerability (CVE-2016-2000)HPE Asset Manager Arbitrary Code Execution Vulnerability (CVE-2016-2000) Release date:Updated on:Affected Systems: HP AssetManager 9.50HP AssetManager 9.41HP AssetManager

Apple iOS Kernel Memory Corruption Vulnerability (CVE-2016-1755)Apple iOS Kernel Memory Corruption Vulnerability (CVE-2016-1755) Release date:Updated on:Affected Systems: Apple iOS Description: CVE (CAN) ID: CVE-2016-1755IOS is an operating

Ar-drone: Open-Source Project Analysis of hijacking and control drones on GitHub Ar-drone is a protocol implementation method used by Parrot ARDrone 2.0 and is also compatible with Version 1.0.Install the latest version through Github:Npm install

Analysis of SkidLocker using AES-256 Encryption Algorithm0 × 01 Overview The SkidLocker ransomware uses AES-256 encryption algorithms to encrypt different types of files by retrieving the content of the file information, and the ransom amount needs

GitHub CSP Application Experience Sharing0x01 Content Injection This article first introduces the concept of Content Injection, which mainly includes two aspects:{C} Cross Site Scripting (XSS): You should understand Scriptless attacks: No Script

Special Condition Data Transmission Analysis 0x00 ask the restaurant Is there anything you can't get? Open a brain hole. The reason is that at the end of 2014, we saw Kingsoft's online malicious code analysis system "Fire eye"

A vulnerability in Taikang Life Insurance affects users' mobile phone names (direct SQL transfer) Taikang Life Insurance Co., Ltd. was founded in August 22, 1996 and is headquartered in Beijing. After 19 years of steady and innovative development,

Leakage of vpn Information of anzhi network leads to entry into the Intranet Leakage of anzhi network information leads to entry into the

Analysis on the advantages and disadvantages of Uber's three vulnerabilities Through careful design, the author turns a self-XSS chicken ribs and two csrf chicken ribs into a high quality vulnerability.Original article:

Webfront game station has SQL injection (including multiple bypassing and encoding) SQL Injection for APP security Target: game.feng.comSQL injection is detected in the following areas: (latency blind

If a carrier's system account is leaked, the mobile phone number cannot be used in arrears (Region restrictions) In fact, there are many other functions to demonstrate only one of the most dangerous ones. Collect an account from external

Multiple SQL injections of Dongfang franchise network need to be filtered (involving 0.21 million user data) RT.   http://rank.4006666688.com/list/?subcgid=4   http://brand.4006666688.com/brandlist/?blimit=0 The two injection points, although not

The SQL Injection Vulnerability (containing more than million merchant data) exists in the official Wanda feifan APP) SQL Injection for APP security Target: Wanda feifan merchant APPSQL Injection exists in the following areas: (userName in POST,

A provincial O & M system of China Mobile has blind injection and getshell (a large number of employees/basic devices/authorizable Intranet) Blind injection is really slow Http :// Mask Region 1.://**.**.**/NMMP/ Forgot passwordMobile =

Analysis of Microsoft WebDAV Elevation of Privilege Vulnerability (cve-2016-0051) 1. About cve-2016-0051The official description of Microsoft is as follows:If the Microsoft Web Distributed creation and Version Management (WebDAV) Client

BadLock vulnerability technology tracking and risk protection Green Alliance technology continues to pay attention to the security trend in China. As early as September, the BadLock Threat warning announcement was released immediately. On September 1

SiDDOS: a method for implementing DDOS attacks through SQL Injection  In this tutorial, we will discuss how to use SQL injection to launch DDOS attacks on a website.In fact, there have been some research and tutorials on it, but for me, this is

BetterCap: a modular and lightweight MiTM Framework Analysis BetterCap is a powerful, modular, and lightweight MiTM framework that can be used to launch various types of Man-In-The-Middle attacks on The network ). It can also help you operate HTTP