Cloud Security

Apple iOS Security Vulnerabilities (APPLE-SA-2015-01-27-2) Release date:Updated on: Affected Systems:Apple iOSUnaffected system:Apple iOS 8.1.3Description:Bugtraq id: 72333CVE (CAN) ID: CVE-2014-8840, CVE-2014-4493, CVE-2014-4494, CVE-2014-4467

UEFI EDK1 Buffer Overflow Vulnerability (CVE-2014-8271) UEFI EDK1 Buffer Overflow Vulnerability (CVE-2014-8271) Release date:Updated on: Affected Systems:InsydeDescription:CVE (CAN) ID: CVE-2014-8271 EDK1 is an open-source project that provides

Intrexx Arbitrary File Upload Vulnerability (CVE-2014-2025) Release date:Updated on: Affected Systems:Intrexx Professional 6.0Intrexx Professional 5.2Description:Bugtraq id: 71672CVE (CAN) ID: CVE-2014-2025 Intrexx is an integrated cross-platform

Android Hacking Part 4: unexpected information leakage (edge channel information leakage) We will discuss unexpected information leaks, that is, the so-called "edge channel information leakage" that I often mention ". What is unexpected information

Maomiao street server security vulnerabilities-completely control servers Wdcp panel is installed on the maomiao street server. However, this Panel has the problem of unauthorized access to the page for adding a mysql user. You can change the

Adobe Reader and Acrobat Heap Buffer Overflow Vulnerability (CVE-2014-0567) Release date:Updated on: Affected Systems:Adobe Reader 11.xAdobe Reader 10.xDescription:Bugtraq id: 69827CVE (CAN) ID: CVE-2014-0567 Adobe Reader (also known as Acrobat

HTTP File Server 'parserlib. pa' Remote Command Execution Vulnerability Release date:Updated on: Affected Systems:HTTP File Server 2.3.xDescription:Bugtraq id: 69782CVE (CAN) ID: CVE-2014-6287 HFS is the HTTP file server. The file ParserLib. pas

Attack Android injection 3I continue to detail the technical solution for Injection through ptrace in "II". In this chapter, I will introduce a unique Injection Technology on Android, named -- Component Injection. As the name suggests, this method

Apache Subversion insecure authentication vulnerability (CVE-2014-3528) Release date:Updated on: Affected Systems:Apache Group Subversion 1.8.9-2Apache Group Subversion 1.6.17dfsg-4 + deb7u6Apache Group Subversion 1.6.17dfsg-4 + deb7u3Apache Group

Fault resolution: Implementing ECMP functions on the firewall I. Network Topology Ii. basic configuration 1. The Gateway in the workplace is the EX4200 of Juniper, Which is configured with vlan524: 10.63.224.0/24 and vlan525: 10.63.225.0/24.

Browser settings prevent third-party cookies from protecting privacy When we search for some things on some large websites, advertisements related to the things you search appear on other websites. This phenomenon shows that our privacy has been

Trap capture signal in shell A signal is a mechanism for inter-process communication. It provides an asynchronous software interruption for an application to receive commands (that is, signals) sent by other active terminals ). After the application

Iptables log Exploration In addition to effectively controlling network access, the main function of the firewall is to clearly record network access and automatically generate logs for storage. Although the log format varies with the firewall

Technical analysis: How Trojans tamper with boot passwords After Mr. Duan from Jiangsu downloads a software called "Free q" in the QQ group, the computer will not be able to enter the system after it is started, and a prompt will pop up, "Please

Sogou input method design defects help me successfully escalate Permissions The installation volume is so large that many services may even find sogou's input method. I vaguely remember Microsoft's classic Input Method Vulnerability, which of course

HCTF writeup (web) Qupiron's favorite 10pt Legend has it that Qiu bilong is the younger brother of Cupid and Qiu bilong is a little god of love. Although he has two wings, he is too fat to fly because he eats too much ~ So what's the problem ?! Qiu

Exploitation of NTFS data streams under WIN in webshell hidingThis exploitation method. As early as a few years ago, it was nothing new.I have never paid special attention to it before. I made a mistake today, so I recorded it.First, write the

AA carpool vulnerability 3 # (full-site user passwords can be modified in batches if AA carpool is improperly designed) We changed our password and captured the package. We found the following interface:   The following serviceKey is a

Kindeditor may cause full browsing in specific circumstances Because there are few examples, I started to think about not their vulnerabilities. I thought about them later, but I didn't check the user's normal configuration content. I 'd like to

Implementation Principles of Huawei Basic NAT and NAPT NAT is a very important and widely used technology of routers. However, many readers have not been clear about the working principles of NAT implementation methods, but it is actually very