Cloud Security

Privilege Escalation Analysis for Android system vulnerabilities (1) Preface 1.1 What is rootRoot -- that is, the Elevation of Privilege of the system mentioned here. It is usually used for Android mobile phones, so that users can obtain the

VMware vRealize Business cross-site scripting (CVE-2016-2075)VMware vRealize Business cross-site scripting (CVE-2016-2075) Release date:Updated on:Affected Systems: VMWare vRealize Business Advanced 8.x Description: CVE (CAN) ID: CVE-2016-2075

Linux kernel Privilege Escalation Vulnerability (CVE-2016-3157)Linux kernel Privilege Escalation Vulnerability (CVE-2016-3157) Release date:Updated on:Affected Systems: Linux kernel Description: CVE (CAN) ID: CVE-2016-3157Linux Kernel is the

Android LIST_POISON Security Mechanism Bypass Vulnerability (CVE-2016-0821)Android LIST_POISON Security Mechanism Bypass Vulnerability (CVE-2016-0821) Release date:Updated on:Affected Systems: Android 6.0 Description: CVE (CAN) ID: CVE-2016-082

Apple iOS Kernel Race Condition Vulnerability (CVE-2016-1757)Apple iOS Kernel Race Condition Vulnerability (CVE-2016-1757) Release date:Updated on:Affected Systems: Apple iOS Description: CVE (CAN) ID: CVE-2016-1757IOS is an operating system

Apple iOS Kernel Memory Corruption Vulnerability (CVE-2016-1755)Apple iOS Kernel Memory Corruption Vulnerability (CVE-2016-1755) Release date:Updated on:Affected Systems: Apple iOS Description: CVE (CAN) ID: CVE-2016-1755IOS is an operating

FreeBSD Kernel amd64_set_ldt Heap Overflow Vulnerability (CVE-2016-1885)FreeBSD Kernel amd64_set_ldt Heap Overflow Vulnerability (CVE-2016-1885) Release date:Updated on:Affected Systems: FreeBSD Description: CVE (CAN) ID: CVE-2016-1885FreeBSD

XZERES 442SR Wind Turbine XSS Vulnerability (CVE-2016-2287)XZERES 442SR Wind Turbine XSS Vulnerability (CVE-2016-2287) Release date:Updated on:Affected Systems: XZERES 442SR Wind Turbine Description: CVE (CAN) ID: CVE-2016-2287XZERES 442SR

Dropbear ssh crlf Injection Vulnerability in CVE-2016-3116)Dropbear ssh crlf Injection Vulnerability in CVE-2016-3116) Release date:Updated on:Affected Systems: Dropbear SSH Description: CVE (CAN) ID: CVE-2016-3116Dropbear SSH is a small SSH

Ar-drone: Open-Source Project Analysis of hijacking and control drones on GitHub Ar-drone is a protocol implementation method used by Parrot ARDrone 2.0 and is also compatible with Version 1.0.Install the latest version through Github:Npm install

Adobe Digital Editions Memory Corruption Vulnerability (CVE-2016-0954)Adobe Digital Editions Memory Corruption Vulnerability (CVE-2016-0954) Release date:Updated on:Affected Systems: Adobe Digital Editions Description: CVE (CAN) ID: CVE-2016-0

Samba internal DNS server out-of-bounds read Vulnerability (CVE-2016-0771)Samba internal DNS server out-of-bounds read Vulnerability (CVE-2016-0771) Release date:Updated on:Affected Systems: Samba Samba 4.0.0 － 4.4.0rc3 Description: CVE (CAN) ID:

Attackers attacked the site by Angler Exploit.     In some well-known news websites, entertainment portal websites, and political comment websites, a large number of netizens have been attacked by malicious advertisements by Angler Exploit. This

The hacker virus will be poisoned just after the computer is turned on! In recent years, hackers have been cracking down their minds to make it easy and quick for users to infect computer viruses! Not only do you have to be proficient in all kinds

Getshell can be used to write arbitrary files on a site of Beijing xinnet digital.   Beijing xinnet Digital Information Technology Co., Ltd. was established in 1993 and is a subsidiary of China Digital group. It is a top Internet basic application

A Geely website exposes all source code. successfully won the server. You need to upgrade Nginx. Nginx parsing problem + Source Code leakage = server Permissions Http://2014beijing.geely.com/2014beijing.tar.gz1g or more source code. After

Can I use a train ticket to restore my ID card number? Today, we will show you how to use a train ticket to restore the complete ID card number. As we all know, a train ticket can have an incomplete name and ID card number. The four digits in the ID

Jboss Command Execution exists on a Vehicle Dynamic Intelligent Monitoring Platform in Shanghai (involving a large amount of hazardous Vehicle Information/implementing monitoring and dispatching/involving a large amount of vehicle hazardous

The SQL Injection Vulnerability (containing more than million merchant data) exists in the official Wanda feifan APP) SQL Injection for APP security Target: Wanda feifan merchant APPSQL Injection exists in the following areas: (userName in POST,

The best East Main Site has SQL injection (the injection parameter ticket contains 230 million + User Data/cross-42 databases)   Target: www.veryeast.cnSQL Injection exists in the following areas: (injection parameter ticket, error injection,