Cloud Security

Remote Code Execution Vulnerability after Foxit Reader is released (CVE-2017-10945)Remote Code Execution Vulnerability after Foxit Reader is released (CVE-2017-10945) Release date:Updated on:Affected Systems: Foxit Reader 8.3.0.14878 Description:

Researchers say HTML5 can be used to track Internet users HTML5 may be the most popular method for creating web pages, but be careful. Thanks to its new features, it is very easy to track Internet users. Arvind Narayanan, assistant professor of

Adobe dng sdk Memory Corruption Vulnerability (CVE-2016-4167)Adobe dng sdk Memory Corruption Vulnerability (CVE-2016-4167) Release date:Updated on:Affected Systems: Adobe DNG Software Development Kit Adobe DNG Software Development Kit Description:

How to Use System Exception Handling Cases to exploit incredible Vulnerabilities   Author: [email protected]0x00 Introduction The read, write, and execution attributes of memory are one of the most important mechanisms for system security.

Cisco IOS/ios xe DHCPv6 relay Denial of Service Vulnerability (CVE-2016-1348)Cisco IOS/ios xe DHCPv6 relay Denial of Service Vulnerability (CVE-2016-1348) Release date:Updated on:Affected Systems: Cisco IOS Description: CVE (CAN) ID: CVE-2016-1

Release of nmap 7.10 (12 new scripts, bug fixes, and OS recognition are added) In this release, Namp 7.10 has been greatly improved based on previous versions! 12 new NNS are added, with hundreds of OS systems and version fingerprint recognition. Of

HP Operations Orchestration Arbitrary Code Execution Vulnerability (CVE-2016-1997)HP Operations Orchestration Arbitrary Code Execution Vulnerability (CVE-2016-1997) Release date:Updated on:Affected Systems: HP Operations Orchestration

Security researchers discovered the Instagram vulnerability and was threatened by FaceBook executives An independent security researcher claims that he has discovered a series of security vulnerabilities and configuration defects in Instagram. By

From deserialization to command execution -- POP execution chain in Java 0x00 Preface As a non-Java %! @ # &, This document only records the learning and research process of Java deserialization exploitation.0x01 what is

Chrome V8 allows attackers to hijack Android phones Guang Gong, a researcher at Qihoo 360, demonstrated how to use a Chrome V8 engine vulnerability to hijack the latest Android phone at MobilePwn2Own. The vulnerability details are not disclosed.

Roundcube webmail Cross-Site Scripting Vulnerability (CVE-2015-8105)Roundcube webmail Cross-Site Scripting Vulnerability (CVE-2015-8105) Release date:Updated on:Affected Systems: RoundCube Webmail RoundCube Webmail 1.1.x-1.1.3 Description: CVE

Wireshark gsm rlc/MAC parser DoS Vulnerability (CVE-2015-6245)Wireshark gsm rlc/MAC parser DoS Vulnerability (CVE-2015-6245) Release date:Updated on:Affected Systems: Wireshark Wireshark 1.12.x Description: Bugtraq id: 76382CVE (CAN) ID: CVE-2015-62

Decryption BBOSS organization: Underground controllers of over 0.12 million sites worldwide Every day, we are confused about the world we live in, and the things that the world presents constantly exceed our cognition. Every day, we are pleasantly

How to Use XSLT to continue cracking XML 0x00 Introduction XSL First, we should say that this XSLT should be broken: XSL-T. XSL refers to the EXtensible Stylesheet Language, which is directly translated into the extended style sheet Language. This

Douyu TV has unauthorized access from an IP address to the information of more than 20 million users (the host phone QQ lets me watch/kill the information of each video node, etc) I am looking for an internship recently. The problem starts with an

Moutai e-commerce has multiple SQL Injection packages in the background (DBA permission/17 databases/47W members) Note:Http://www.emaotai.cn: 90/zyd/ Account: wangleiPassword 123456Get submit method SQL injection point:Http://www.emaotai.cn:

China Telecom's micro-store system design defects involve the telecom micro-store Administrator account password and order risks China Telecom's micro-store system design defects involve the telecom micro-store Administrator account password and

Vulnerabilities on major platforms of China wide meiyi vbox vendors Detailed description: WTI manages the platform SQL injection and weak passwords on the cloud platform, allowing you to control all vbox products online. A large number of ports are

Weaver's cloud Office Platform's arbitrary Password Reset Vulnerability (Official Account as an example) Https://passport.eteams.cn/password   Reset the password.Change username to any email address to reset it.Take the official website account

Situation Awareness-Based Network Security Event Prediction Method Analysis Machine Learning is applied in the security field, especially in various attack detection (external intrusion detection and internal threat detection). I believe many people