Cloud Security

Discussion on Stagefright Vulnerability0x00 Last night, Stagefright reported a major vulnerability, which could cause remote code execution or even sending MMS messages, which may intrude into users' mobile devices. This sounds like a big loophole.

Android. Hook framework xposed Tutorial: https://github.com/rovo89/XposedBridge/wiki/Development-tutorial Official Website: http://repo.xposed.info/module/de.robv.android.xposed.installer Apk: http://dl-xda.xposed.info/modules/de.robv.android.xposed.

Analysis and protection: Win10 execution Stream Protection Bypass   Black Hat USA 2015 is in progress. In the latest contribution list published by Microsoft's security response center, Zhang Yunhai, a security researcher at lumon technology, ranks 6

Record IIS short file name leakage Vulnerability Detection Although I am an editor, I don't catch a cold Writing technical articles. Recently, my younger brother has been chasing me and I want to explain how to exploit the IIS short file name

SSL/TLS RC4 information leakage (CVE-2015-2808)SSL/TLS RC4 information leakage (CVE-2015-2808) Release date:Updated on:Affected Systems: IBM Websphere Application Server 7.xIBM Websphere Application Server 6.xOracle JRockit Description:

Google Chrome DoS Vulnerability (CVE-2015-5605)Google Chrome DoS Vulnerability (CVE-2015-5605) Release date:Updated on:Affected Systems: Google Chrome Description: Bugtraq id: 76007CVE (CAN) ID: CVE-2015-5605Google Chrome is a Web browser tool

Linux kernel kvm_apic_has_events DoS Vulnerability (CVE-2015-4692)Linux kernel kvm_apic_has_events DoS Vulnerability (CVE-2015-4692) Release date:Updated on:Affected Systems: Linux kernel Description: CVE (CAN) ID: CVE-2015-4692Linux Kernel

Hackers remotely attack Jeeps on the road Andy Greenberg of Wired participated in a remote attack car Demonstration: sitting in a Cherokee Jeep on the road, 70 miles per hour, and the car was remotely hijacked by hackers/security researchers,

Adobe Flash Player and AIR Memory Corruption Vulnerability (CVE-2015-5124)Adobe Flash Player and AIR Memory Corruption Vulnerability (CVE-2015-5124) Release date:Updated on:Affected Systems: Adobe Flash Player Adobe Flash Player Adobe Flash Player

Iot security issues caused by Honeypot In recent years, the Internet of Things (IOT) has been around in a fast and secure manner. The evil names of "anything connected to the Internet can be hacked" are also like shadows. In 2015 alone, security

How to quickly discover Windows viruses without external tools After several years of emergency response work, I think it is very useful to summarize a "methodology" to quickly determine whether a computer is infected with Trojans and viruses. This

Backdoor implantation experience and solutions I found that many programs on the server were infected with Trojans and handled trojan files together with developers. This morning I found that the game background could not be opened again. On the

Bank theft and password theft-ZUES (Zeus) Trojan Analysis Report I. pdf file analysis sample file xxx.pdf after detailed analysis, no overflow vulnerabilities, shellcode AND exp of the PDF file were found. After opening the file, the anti-virus

Multiple SQL injections on the master site Multiple SQL injections on the master site First: URL: http://www.zhuaxia.com/php_controller/myFeedController.php? Action = channelInfo & chid = 833 & customerId = 29034823 & lastid = 0 & show_all_item = 1 &

Arbitrary File Reading Vulnerability in Huaxia Fund's main site URL: http://www.chinaamc.com: 80/portal/en/second. jsp POST parameters: button = Get % 20 NAVs & categoty_link_nav = xxxxxxxx & column = ROOT> en> Investment % 20 Products> ABF % 20

Due to insufficient security management, one of our laziness, CHANGBA's security boundary has been broken through (entering the Intranet) Is a weak password, simple, efficient, and lethalTop names in China (data statistics from the National

Arbitrary code execution vulnerability caused by file upload of a system in Neusoft (affecting data security of many government, housing provident fund, and social security systems) Before arriving at the company, I received a piece of news from my

Create tips secret-PHP callback Backdoor Recently, many people have shared a word about dog shield, but it is nothing more than constructing some dynamic functions using various methods, for example, $ _ GET ['func'] ($ _ REQUEST ['pass. Although

The latest cmseasy Injection Unfortunately, 360 webscan is not bypassed (in fact, it is easy to bypass) Cmseasy, latest version 0318, has an injectionVulnerability file:/lib/default/archive_act.php250-rows:  Function search_action () {// print_r ($ _

The moji.com app is unauthorized to add the user's shipping address. Preparation: Create two accounts A and BAccess moji mall through moji weather mobile client1. Add the shipping addressThere is a userid in the request data for adding the