Cloud Security

Local Elevation of Privilege Vulnerability in Ubuntu 16.04 and Countermeasures Recently, Twitter user @ Vitaly Nikolenko published a message saying that the latest Ubuntu version (Ubuntu 16.04) has a high-risk Local Elevation of Privilege

Adobe Brackets XSS Vulnerability (CVE-2016-4164)Adobe Brackets XSS Vulnerability (CVE-2016-4164) Release date:Updated on:Affected Systems: Adobe Brackets Description: CVE (CAN) ID: CVE-2016-4164 Adobe Brackets is an open-source code encoder

The gnu c Library glob Stack Buffer Overflow Vulnerability (CVE-2016-1234)The gnu c Library glob Stack Buffer Overflow Vulnerability (CVE-2016-1234) Release date:Updated on:Affected Systems: Gnu c Library (glibc) Description: CVE (CAN) ID:

Cisco Jabber for Windows STARTTLS downgrade Vulnerability (CVE-2015-6409)Cisco Jabber for Windows STARTTLS downgrade Vulnerability (CVE-2015-6409) Release date:Updated on:Affected Systems: Cisco Jabber for Windows 11.1.xCisco Jabber for Windows 11.0.

Cisco ASR 5000 GGSN Component Denial of Service Vulnerability (CVE-2015-4201)Cisco ASR 5000 GGSN Component Denial of Service Vulnerability (CVE-2015-4201) Release date:Updated on:Affected Systems: Cisco ASR 5000 18.0.L0.59219Cisco ASR 5000 17.2.0.5

NetFlow Analyzer Vulnerability (CVE-2015-4418)NetFlow Analyzer Vulnerability (CVE-2015-4418) Release date:Updated on:Affected Systems: ManageEngine Netflow Analyzer Description: Bugtraq id: 75068CVE (CAN) ID: CVE-2015-4418NetFlow Analyzer is

Apache Struts Security Restriction Bypass Vulnerability (CVE-2015-0899)Apache Struts Security Restriction Bypass Vulnerability (CVE-2015-0899) Release date:Updated on:Affected Systems: Apache Group Struts 1.1 Description: Bugtraq id: 74423CVE (CAN)

See how windows creates a "no-check-free" trojan for your computer. IExpressIs a cab file used to modify the compatibility of the msi installation package, it is best to use other cab tools to package the file into a cab, and then replace it with

Asacub history: from spyware to malware Recently, security personnel on mobile banking Trojan Trojan-Banker.AndroidOS.Asacub for in-depth analysis, found that the malicious function with the version of the change continues to increase.Earlier

"Self-explosive" virus Rombertik: Multi-Level obfuscation, high complexity, and automatic hard drive erasure during analysis   Rombertik is a highly complex virus (malware) that uses multi-level obfuscation, highly complex escape detection

SYMANTEC Firewall kernel Overflow Vulnerability exploitation-Security Return Method SoBeItThis vulnerability occurs in SYMDNS. in SYS, when a DNS response is processed, because the total domain name length is not verified, you can enter a domain

The boundaries between viruses, worms, and Trojans are becoming increasingly vague, so they can be understood for their potential purposes.More and more easily. Generally, a virus is transmitted by email with a certain payload. Worms use other

Recently, hacker attacks frequently occur. Our friends are also constantly suffering from QQ, email, and game account theft. Today's hacking technology is moving towards the popularization direction, and more people are able to master the system

This is a virus cleanup method long ago. 1. Find the pagefile. pif file of drive d to see when it was created. Deleted. 2. Use the System Restoration function to restore the system to the date before the virus was generated. In this way, there will

AS Anti-Virus (Aosheng Anti-VirusIs a security software from the United States. It uses the F-prot engine to defend against viruses, hackers, spyware and other security attacks. AS Anti-Virus is not well-known in China. We will follow the tips below

Use encrypted OFFICE binary format to escape detection   This article was published by Intel's secure Haifei Li and Intel's laboratory Xiaoning Li. Microsoft Office documents play an important role in our work and personal life. Unfortunately, in

Text/figure wastWe usually need to shell the Chinese software and decryption software, because most of the software has shelling. "Shell" is a program dedicated to protecting the software from unauthorized modification or decompilation. They

Comments: Emails are not secure. each link in the process of sending, transmitting, and receiving emails may have weak links. If malicious users exploit this vulnerability, you can easily crack your account and get the mail content. 1. The mail

Research on JAVA reverse TCP practices in Metasploit   When studying the JAVA deserialization vulnerability of CVE-2015-7450, there is a problem: in WebSphere, this vulnerability can only execute commands, but not echo the execution results. In

Many people know SQL injection andSQL parameterized query can prevent SQL Injection, YesWhy can injection be prevented?But not many people know it. This article focuses on this issue. You may have seen this article in some articles. Of course, it is