Cloud Security

Multiple Memory Corruption Vulnerabilities in Kaspersky Antivirus Affected Systems: Kaspersky Labs Kaspersky AntivirusDescription: Bugtraq id: 77608 Kaspersky Antivirus is a very popular anti-virus software. Kaspersky Antivirus has multiple

Ceph Object Gateway CRLF Vulnerability (CVE-2015-5245)Ceph Object Gateway CRLF Vulnerability (CVE-2015-5245) Release date:Updated on:Affected Systems: Ceph Ceph Description: CVE (CAN) ID: CVE-2015-5245Ceph Object Gateway is an Object Storage

OwnCloud Desktop Client man-in-the-middle attack Vulnerability (CVE-2015-4456)OwnCloud Desktop Client man-in-the-middle attack Vulnerability (CVE-2015-4456) Release date:Updated on:Affected Systems: OwnCloud Desktop Client Description: CVE

Cisco APIC Access Control Vulnerability (CVE-2015-4235)Cisco APIC Access Control Vulnerability (CVE-2015-4235) Release date:Updated on:Affected Systems: Cisco Application Policy Infrastructure Controller Cisco Application Policy Infrastructure

IBM InfoSphere DataStage Arbitrary Code Execution Vulnerability (CVE-2015-1900)IBM InfoSphere DataStage Arbitrary Code Execution Vulnerability (CVE-2015-1900) Release date:Updated on:Affected Systems: IBM InfoSphere DataStage 9.1IBM InfoSphere

EMC Documentum D2 Cross-Site Scripting Vulnerability (CVE-2015-0549)EMC Documentum D2 Cross-Site Scripting Vulnerability (CVE-2015-0549) Release date:Updated on:Affected Systems: EMC Documentum D2 4.5 Description: CVE (CAN) ID:

Let's talk about the two 0-day fixes in May. On July 15, May 12, 2015, Beijing time, Microsoft pushed the patch on July 15, May, including security updates for multiple components such as IE, Windows kernel, Windows kernel driver, and Office. Two

Apache Xerces-c xml Parser Apache Xerces-c xml Parser Release date:Updated on:Affected Systems: Apache Group Xerces C++ Description: CVE (CAN) ID: CVE-2015-0252Xerces is an open-source XML document parsing project promoted by the Apache

Redis Database Security Manual Redis is a high-performance key-value database, which has never been used in the past two years. The popularity of Redis also brings about a series of security issues. Many attackers have initiated attacks through

Apache ActiveMQ LDAP Authentication Bypass Vulnerability (CVE-2014-3612) Release date:Updated on: Affected Systems:Apache Group ActiveMQ ApolloDescription:Bugtraq id: 72513CVE (CAN) ID: CVE-2014-3612 Apache ActiveMQ is a popular message

Keep in mind that these seven points make your Linux server more secure I run several Linux servers. I have one at home, serving as a file server, and three active servers used as my Site Server, email server, and cloud storage server. Although I

Three Windows Server SSL/TLS security vulnerabilities and their remedy Not long ago, the simple use of SSL on Windows servers, or its successor TLS, were considered safe communication methods. But now the era has changed, and SSL and TLS have become

Bootkit hard drive Forensics-lecture 1 Some time ago, I received an email asking me how to bypass the bootkit hard drive filter. This highlight is that my MBR spoofing code can be driven by a popular forensic tool. Although I believe that hard disk

How to encrypt USB flash drives This article describes how to use Cryptsetup to encrypt a USB flash drive As the storage capacity of the USB flash drive increases and the price decreases, you can easily store all your personal data in a portable

Windows Hash and cracking   Overview 1.1 hash Hash is usually translated as "Hash", which is also directly translated as "Hash", that is, input of any length (also called pre- ing, pre-image ), the hash algorithm is used to convert an output with a

Anti-database theft-Web Front-end slow Encryption0x00 Preface The world's martial arts, only fast. However, different passwords are encrypted. The faster the algorithm, the easier it is to break.0x01 brute force cracking Password cracking means

Express Delivery security-Asian wind Express Delivery Main Site SQL Injection Command Execution causes the entire site to fall Express safety of the Asian wind fast transport main site SQL Injection Command Execution caused the whole site fell into

Password Reset Vulnerability for any user on popular websites The password reset operation is not associated with a specific mobile phone number. As a result, the password of any registered mobile phone account can be reset.1. The returned results

Web Application Security Defense 100 TechnologyHow to defend against web Application Security is a question that every web security practitioner may ask. It is very difficult to answer. It is easy to be too superficial or theoretical. To clarify

Analysis of Oracle Database XXE Injection Vulnerability (CVE-2014-6577)Vulnerability description the XML Parser module of the Oracle database is vulnerable to XML External Entity (XXE) injection.Affected Versions: 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12