Cloud Security

How does Android reproduce major vulnerabilities? A report from VICE confirms that Zimperium zLabs investigator Joshua Drake found the Stagefright 2.0 vulnerability in the Android operating system. This vulnerability contains two bugs that can be

Linux Kernel 3.19 Security Vulnerability exposed Ubuntu 15.04 users should update it as soon as possible Linux Kernel 3.19 has two security vulnerabilities! The first vulnerability may cause information leakage of Multi-device Linux Kernel drivers

Mozilla Firefox InitTextures Function Denial of Service Vulnerability (CVE-2015-7177)Mozilla Firefox InitTextures Function Denial of Service Vulnerability (CVE-2015-7177) Release date:Updated on:Affected Systems: Mozilla Firefox & lt; 41.0Mozilla

QEMU NE2000 NIC simulation Heap Buffer Overflow VulnerabilityQEMU NE2000 NIC simulation Heap Buffer Overflow Vulnerability Release date:Updated on:Affected Systems: QEMU Description: Bugtraq id: 76746CVE (CAN) ID: CVE-2015-5279QEMU is an open

How to disable the Cookie FunctionCookies are actually small data packets that contain information about your surfing habits and facilitate future operations. However, they will be known to websites that know cookies on the Internet. For this reason,

Microsoft RDSH Spoofing Vulnerability (CVE-2015-2472) (MS15-082)Microsoft RDSH Spoofing Vulnerability (CVE-2015-2472) (MS15-082) Release date:Updated on:Affected Systems: Microsoft Windows VistaMicrosoft Windows Server 2012 R2Microsoft Windows

Java 0-day vulnerability discovered for the first time in two years Oracle recently announced the first Java 0-day vulnerability in the past two years. It affects the Java Web Start application sandbox and Java applets sandbox. Considering that the

Multiple IBM product Denial of Service Vulnerabilities (CVE-2015-4936)Multiple IBM product Denial of Service Vulnerabilities (CVE-2015-4936) Release date:Updated on:Affected Systems: IBM WebSphere eXtreme Scale 8.6-8.6.0.8 Description: Bugtraq

Sensor settings in the OSSIM System The setting of Sensor is particularly important. The specific setting method is similar to that of the sniffer. Many people have installed the sniffer. In large networks, this method is not as simple as accessing

Analysis on the theft of ICBC cards: How did the money in the bank card be lost? Banks and operators, customers and banks, operators and customers, as long as data traces are left, each link may have leakage, allowing attackers to take advantage of

Hacking Team virus test environment analysis 0x00 Preface In addition to discovering a large number of backdoor, Trojan, and other attack source code in the files leaked by the Hacking Team, the anheng research Team also found two source code for

How can enterprises defend against weak cloud passwords? Weak passwords are a common threat for enterprises that rely on cloud services. Expert Dejan Lukan summarized some best practices on passwords. Cloud services have sprung up in the past few

Password cracking artifact John the Ripper GUI-Johnny Johnny is a cross-platform open-source GUI developed based on popular password cracking tool John the Ripper. What is John the Ripper? If the name is literally translated, it is JOHN's

Getshell can be used to upload any file in Weaver Eoffice. 1. File Location:/webservice/upload. php. The related code is as follows: Directly upload without any restrictions. The file name is the original file name. The file path is as

Getshell is caused by improper maintenance configuration of an important system service in Sohu Changyou. http://drops.wooyun.org/papers/7830 URL: http://bbs.cy.com/The last leaked UCKEY is not modified, causing direct Getshell.First, follow the

From django's SECRET_KEY to Code Execution Recently, I reviewed the code and found that SECRET_KEY is leaked in the JS Code of some products. This value is used as the password-encrypted salt, which exposes that the encrypted salt is not good, more

Dangerous upload dialog boxShare an old article. I read an article "ui-redressing on Html5 new features" on ASRC a few years ago and wrote some improvement solutions.File Dialog Box file upload dialog box is a Web page control that has always

Multiple weak passwords in a station on the 19th floor (with test scripts) Multiple weak passwords in a station on the 19th floor (with test scripts) Vulnerability system http://blog.19ued.com/The WordPress blog system is used.Based on WP defects,

A mobile phone system in China causes SQL injection to leak a large number of databases URL: http://subadmin.cnmo.com First, the system will return the user does not exist and the password is wrong. So I started to use top500 to run the user name

A new type of olap dml Injection Attack Oracle OLAP applications that use DBMS_AW, OLAP_TABLE, or any OLAP * functions face a new type of injection threat. Ultimately, this is caused by the syntax difference between SQL and OLAP DML. The final