Cloud Security

Linux Kernel 'crypto/pcrypt. c' Local Denial of Service Vulnerability (CVE-2017-18075)Linux Kernel 'crypto/pcrypt. c' Local Denial of Service Vulnerability (CVE-2017-18075) Release date:Updated on:Affected Systems: Linux kernel Description:

Libav Remote Denial of Service Vulnerability (CVE-2018-5766)Libav Remote Denial of Service Vulnerability (CVE-2018-5766) Release date:Updated on:Affected Systems: Libav Description: Bugtraq id: 102793CVE (CAN) ID: CVE-2018-5766Libav is a

Firefox has a severe Remote Code Execution Vulnerability and has been fixed Mozilla released an important update for the Firefox browser and fixed a serious vulnerability that allows remote attackers to execute malicious code on the affected

Researchers say HTML5 can be used to track Internet users HTML5 may be the most popular method for creating web pages, but be careful. Thanks to its new features, it is very easy to track Internet users. Arvind Narayanan, assistant professor of

Autodesk Backburner stack buffer overflow vulnerability in CVE-2016-2344)Autodesk Backburner stack buffer overflow vulnerability in CVE-2016-2344) Release date:Updated on:Affected Systems: Autodesk Backburner 2016.0.0.2150 Description: CVE (CAN) ID:

From deserialization to command execution -- POP execution chain in Java 0x00 Preface As a non-Java %! @ # &, This document only records the learning and research process of Java deserialization exploitation.0x01 what is

Cisco APIC Access Control Vulnerability (CVE-2015-4235)Cisco APIC Access Control Vulnerability (CVE-2015-4235) Release date:Updated on:Affected Systems: Cisco Application Policy Infrastructure Controller Cisco Application Policy Infrastructure

EMC Documentum D2 Cross-Site Scripting Vulnerability (CVE-2015-0549)EMC Documentum D2 Cross-Site Scripting Vulnerability (CVE-2015-0549) Release date:Updated on:Affected Systems: EMC Documentum D2 4.5 Description: CVE (CAN) ID:

Let's talk about the two 0-day fixes in May. On July 15, May 12, 2015, Beijing time, Microsoft pushed the patch on July 15, May, including security updates for multiple components such as IE, Windows kernel, Windows kernel driver, and Office. Two

Apache Xerces-c xml Parser Apache Xerces-c xml Parser Release date:Updated on:Affected Systems: Apache Group Xerces C++ Description: CVE (CAN) ID: CVE-2015-0252Xerces is an open-source XML document parsing project promoted by the Apache

Three Windows Server SSL/TLS security vulnerabilities and their remedy Not long ago, the simple use of SSL on Windows servers, or its successor TLS, were considered safe communication methods. But now the era has changed, and SSL and TLS have become

Ransomware detection report analysis The ransomware virus sample (Locky) is captured by the security team of Green League technology. After analysis, the ransomware will be transmitted by email. Once the user is infected with the virus, the computer

Decryption BBOSS organization: Underground controllers of over 0.12 million sites worldwide Every day, we are confused about the world we live in, and the things that the world presents constantly exceed our cognition. Every day, we are pleasantly

Comments: I found that McAfee could not automatically update the virus database. I don't know what the problem is. Later I read the following method from the Internet and tried it. It feels good. Generally, there is no problem after I reinstall it.1

Midea Supply Chain Management System (formal environment) has command execution. getshell can roam 53 machines through the Intranet. A lot of Intranet machines Http: // 202.104.30.80: 8000/Http: // 202.104.30.80/  JAVA deserialization

Douyu TV has unauthorized access from an IP address to the information of more than 20 million users (the host phone QQ lets me watch/kill the information of each video node, etc) I am looking for an internship recently. The problem starts with an

Moutai e-commerce has multiple SQL Injection packages in the background (DBA permission/17 databases/47W members) Note:Http://www.emaotai.cn: 90/zyd/ Account: wangleiPassword 123456Get submit method SQL injection point:Http://www.emaotai.cn:

Anti-database theft-Web Front-end slow Encryption0x00 Preface The world's martial arts, only fast. However, different passwords are encrypted. The faster the algorithm, the easier it is to break.0x01 brute force cracking Password cracking means

Popular electronic journals online reading system PHP and ASP latest versions kill SQL Injection & amp; PHP version getshell (No Logon required) Latest versions of PHP and ASP for online Reading System of Electronic Journals1. Kill SQL Injection2.

Click hijacking: a pop-up window is prompted to trick users into clicking cookies.     MalwareBytes experts discovered a "Click hijacking" malicious activity: hackers trick users into clicking a pop-up prompt that appears to be a European Cookie