Cloud Security

Free WIFI Remote Control of user behavior (Trojan shell theft of information) what are the potential risks of free WIFI webshell functions?Through netstat, I found that free wifi listens to port 6842. What is the reason for this port?

Cisco TelePresence VCS Privilege Escalation Vulnerability (CVE-2015-4325)Cisco TelePresence VCS Privilege Escalation Vulnerability (CVE-2015-4325) Release date:Updated on:Affected Systems: Cisco TelePresence Video Communication Server X8.5.2

Cisco IOS/ios xe SSHv2 body verification Bypass Vulnerability (CVE-2015-6280)Cisco IOS/ios xe SSHv2 body verification Bypass Vulnerability (CVE-2015-6280) Release date:Updated on:Affected Systems: Cisco IOSCisco IOS XE Description: CVE (CAN)

WebKit multiple security vulnerabilities (APPLE-SA-2015-09-16-1)WebKit multiple security vulnerabilities (APPLE-SA-2015-09-16-1) Release date:Updated on:Affected Systems: Apple iTunes WebKit Open Source Project WebKit Apple iOS

About the principle and defense of JS DDoS attacks Distributed Denial of Service (DDoS) attacks are the oldest and most common attacks against websites. Nick Sullivan is a system engineer at CloudFlare, a website acceleration and security service

Apache Struts CSRF Bypass Vulnerability (CVE-2014-7809) Release date:Updated on: Affected Systems:Apache Group Struts 2.0.0-2.3.20Description:CVE (CAN) ID: CVE-2014-7809 Struts is an open source architecture used to build Web applications. The

Multiple security vulnerabilities in Portech MV-372 VoIP Gateway Release date:Updated on: Affected Systems:PORTech MV-372Description:--------------------------------------------------------------------------------Bugtraq id: 48560 The MV-372 is a

Release date:Updated on: Affected Systems:Mozilla Firefox & lt; 10.0Mozilla Thunderbird 9.0Mozilla Thunderbird 8.0Mozilla Thunderbird 7.0.1Mozilla Thunderbird 7.0Mozilla Thunderbird 6.0.2Mozilla Thunderbird 6.0.1Mozilla Thunderbird 6.0Mozilla

Release date: 2012-11-02Updated on: Affected Systems:Fortinet Fortigate UTMDescription:--------------------------------------------------------------------------------Bugtraq id: 56382Cve id: CVE-2012-4948 FortiGate security products can detect and

Release date:Updated on: Affected Systems:Astium VoIP PBX Description:--------------------------------------------------------------------------------Bugtraq id: 57097 Astium is a network telephone switch. Astium PBX 2.1 and earlier versions have

Release date:Updated on: Affected Systems:Adobe Shockwave Player Description:--------------------------------------------------------------------------------Bugtraq id: 65490CVE (CAN) ID: CVE-2014-0500 Adobe Shockwave Player is a software used to

Experts can easily teach you how to deploy defense measures against DDos attacks There are no 100% effective defense measures for DDoS attacks. However, the attacker must make more resources and efforts than the defender to have such "power".

Correct position for Pwn smart watch Removal Although specialization is the key to many fields, I personally think that too much professionalism in the field of information security will lead to narrow vision and one-sided views. Now I want to try

What is social engineering? (Social Engineering) Social engineering was proposed by the hacker Mitnick in the art of deception after repentance, it is a harmful means to the psychological traps of the victims, such as deception and injury, through

Sensitive Information Leakage vulnerability still exists after upgrade of TP-LINK router 2015 in TL-WR842N Pulian Technology Co., Ltd. is a network equipment R & D and manufacturing company with nearly 20 years of history. Its products are mainly

Case study | Analysis of a website's hacked intrusion track0x00 Introduction In this article, I will briefly introduce the website Upload Vulnerability and finally introduce the protection methods.0x01 background In September 15, 2015, a well-known

Do I have to worry about SQL injection when using java PreparedStatement? First, I felt that I had not written a blog for a long time. First, I was too busy at work, and second, I was not very good at my health. Fortunately, I finally found out the

Wordpress4.2.3 privilege escalation and SQL Injection Vulnerability (CVE-2015-5623) AnalysisThis is a vulnerability that you have been paying attention to over the past few days. wordpress released version 4.2.4 last week, which mentioned fixing

U-Mail system injection 2 (SQL Injections in MySQL LIMIT clause, No Logon required, with a script for getting the user password) SQL Injections in MySQL LIMIT clause, which is not strictly filtered and generates blind injection. As a result, the

General SQL injection vulnerability in a contribution system (affecting many enterprises and schools)   Many search results are found here. Take a few tests:POST/web/keysearch. aspx HTTP/1.1Host: www.XXXX.comUser-Agent: BaiduspiderAccept: text/html,