Cloud Security

Analysis of Different Types of DTD/XXE attacks     When evaluating the security of XML-based services, you cannot forget the DTD-based attacks, such as XML external entity injection attacks (XXE ). In this article, we will provide a comprehensive

Cisco NX-OS System Software Arbitrary File Read Vulnerability (CVE-2017-12338)Cisco NX-OS System Software Arbitrary File Read Vulnerability (CVE-2017-12338) Release date:Updated on:Affected Systems: Cisco NX-OS Description: Bugtraq id:

[In-depth study of Web security] in-depth use of XSS vulnerabilities and in-depth study of xss Preface Starting from this lesson, Xiaozhai has changed the layout again, hoping to give you a better reading experience. The basic principle of XSS is

Adobe ColdFusion XSS Vulnerability (CVE-2016-4159)Adobe ColdFusion XSS Vulnerability (CVE-2016-4159) Release date:Updated on:Affected Systems: Adobe ColdFusion 2016 releaseAdobe ColdFusion 11Adobe ColdFusion 10 Description: CVE (CAN) ID: CVE-20

Google Chrome Address Bar Spoofing Vulnerability (CVE-2016-1664)Google Chrome Address Bar Spoofing Vulnerability (CVE-2016-1664) Release date:Updated on:Affected Systems: Google Chrome Description: CVE (CAN) ID: CVE-2016-1664Google Chrome is

Apple OSX Message cross-origin Scripting Vulnerability (CVE-2016-1764) Apple's CVE-2016-1764, fixed in March, is an application-layer vulnerability that can cause remote attackers to leak all the message content and attachments with the iMessage

Ipsilon IdP Server Denial-of-Service Vulnerability (CVE-2015-5301)Ipsilon IdP Server Denial-of-Service Vulnerability (CVE-2015-5301) Release date:Updated on:Affected Systems: Ipsilon 1.1.x-1.1.1Ipsilon 0.1.0-1.0.2 Description: CVE (CAN) ID:

Mozilla Firefox InitTextures Function Denial of Service Vulnerability (CVE-2015-4517)Mozilla Firefox InitTextures Function Denial of Service Vulnerability (CVE-2015-4517) Release date:Updated on:Affected Systems: Mozilla Firefox & lt; 41.0Mozilla

Cacti SQL Injection Vulnerability (CVE-2015-4342)Cacti SQL Injection Vulnerability (CVE-2015-4342) Release date:Updated on:Affected Systems: Cacti Cacti Description: CVE (CAN) ID: CVE-2015-4342Cacti is a database round robin (RRD) tool that helps

Cisco Access Control Server Remote Denial of Service Vulnerability (CVE-2015-0746)Cisco Access Control Server Remote Denial of Service Vulnerability (CVE-2015-0746) Release date:Updated on:Affected Systems: Cisco Access Control Server 5.5 (0.46.2)

Use LLMNR name resolution defects to hijack a specified host session in the Intranet This article will analyze the LLMNR protocol and use Python to implement question and response. The second part focuses on some ideas about using LLMNR defects in

Use vstruct to parse binary data Vstruct is a module written purely in Python and can be used for parsing and serializing binary data. In fact, Vstruct is a submodule of the vivisect project, which is initiated by Invisig0th Kenshoto and is

Deep Learning: It can beat the European go champion and defend against malware     At the end of last month, the authoritative science magazine Nature published an article about Google's AI program AlphaGo's victory over European go, which

Three methods to decrypt HTTPS traffic Web security is a system engineering. Any minor negligence may cause the collapse of the entire security barrier. For HTTPS, it provides three security guarantees: Content encryption, data integrity, and

Free decryption tools for CoinVault and Bitcryptor ransomware Have you ever been blackmailed by the sinister CoinVault or Bitcryptor software? If yes, it will be good news for you. Kaspersky Lab and security researchers from the Dutch Public

263 The FortiGate device used for communication has the firewall backdoor vulnerability. A vulnerability that everyone knows 1. Vulnerability Type FortiGate firewall backdoor Vulnerability 2. vulnerability address 211.100.52.234 3.

Getshell of Fuyi fashion Hotel (controls the Intranet with nearly 10 primary domain names + nearly 20 databases + nearly 2 million user information + more than 0.6 million membership cards) Injection and upload take full controlHere, we must say

Lenovo eggplant express connect has been exposed to multiple vulnerabilities The Lenovo direct it (Eggplant quickbi) service is vulnerable to hard-coded passwords, information leaks, unencrypted sensitive information, and unauthorized

If a Domain Name Service Provider's text message platform is improperly designed, the customer's information and text messages can be obtained through brute force attacks.Http://www.nwabc.cn/ You can log on to the SMS group to check whether the

Kaspersky said that the previously exposed Android malware Skygofree has unprecedented monitoring capabilities, and Android skygofree Recently, network security issues have become increasingly prominent, and malicious software developers are