Cloud Security

One week PowerShell script Day 1: TCP interactive PowerShell script PowerShell is a common tool for penetration testers. With the close integration of Windows systems, this allows us to do a variety of interesting things. other hackers who use

Proftpd v1.3.5a Heap Overflow VulnerabilityProftpd v1.3.5a Heap Overflow Vulnerability Release date:Updated on:Affected Systems: ProFTPD Project ProFTPD 1.3.5a Description: ProFTPD is an FTP server program on Unix or Unix-like platforms (such

Xen arch/x86/mm. c mod_l2_entry Privilege Elevation Vulnerability (CVE-2015-7835)Xen arch/x86/mm. c mod_l2_entry Privilege Elevation Vulnerability (CVE-2015-7835) Release date:Updated on:Affected Systems: XenSource Xen 3.4-4.6.x Description:

Mozilla Firefox Denial of Service Vulnerability (CVE-2015-7192)Mozilla Firefox Denial of Service Vulnerability (CVE-2015-7192) Release date:Updated on:Affected Systems: Mozilla Firefox Description: CVE (CAN) ID: CVE-2015-7192Mozilla Firefox

Shell scripts monitor MySQL services and shell scripts monitor mysqlThe main content of this article describes how to monitor whether the MySQL service is normal by using shell scripts. For more information, see The general idea is to check whether

A Cisco router is detected infected with a secret backdoor. Security company FireEye researchers reported that backdoor programs called SYNful knock were found on 14 Cisco routers in 4 countries. Cisco has confirmed this. The attack does not take

Cisco IOS/ios xe SSHv2 body verification Bypass Vulnerability (CVE-2015-6280)Cisco IOS/ios xe SSHv2 body verification Bypass Vulnerability (CVE-2015-6280) Release date:Updated on:Affected Systems: Cisco IOSCisco IOS XE Description: CVE (CAN)

Analysis of Camera App privacy data leakage0x00 PrefaceMany popular Android applications have leaked private data. We found another popular Google Play app, "Camera Ultimate", not only optimized users' photos, but also inadvertently

Cisco Firepower 9000 Series unauthenticated web Vulnerability (CVE-2015-4287)Cisco Firepower 9000 Series unauthenticated web Vulnerability (CVE-2015-4287) Release date:Updated on:Affected Systems: Cisco Firepower Description: CVE (CAN) ID: CVE-

Cisco Unified Presence Server Cross-Site Scripting Vulnerability (CVE-2015-4220)Cisco Unified Presence Server Cross-Site Scripting Vulnerability (CVE-2015-4220) Release date:Updated on:Affected Systems: Cisco Unified Presence Server 9.1 (1)

Wireshark Android Logcat File parser Remote Denial of Service VulnerabilityWireshark Android Logcat File parser Remote Denial of Service Vulnerability Release date:Updated on:Affected Systems: Wireshark 1.12.0-1.12.4 Description: Bugtraq id: 74

Lenovo computer system updates found serious Security Vulnerabilities Security company IOActive discloses a high-risk vulnerability in Lenovo computer system updates that has been fixed. Security researchers notified Lenovo in February this year

IOS security analysis on the mobile cloud storage service platform (Parse) Parse: A cloud platform that provides background services for mobile appsParse is a cloud computing platform incubated by YC to provide background services for mobile

Crack the encryption mechanism of the Hidden Tear ransomware   As we all know, three months ago, I released the world's first open-source ransomware Hidden Tear. Unfortunately, many people criticized me on reddit and github. So now I want to

Virus Trojan scan: Reverse Analysis of pandatv incense (Part 2)I. Preface This time, we will continue to analyze the virus in the previous article. The analysis may encounter some different situations. After all, we only need to step down the

Hongkang life can directly reset any user password (reset in seconds) without any restrictions to view sensitive information of any user. 666Detailed description: Review: I rejected the previous one. This adds something.Followed by hongkang Life

Lenovo employee information leakage vulnerability in shengxin sunshine Consulting Company The login system customized by shengxin sunshine consulting company for Lenovo has design defects, which can leak information of all Lenovo employees. (1)

Wordpress4.2.3 privilege escalation and SQL Injection Vulnerability (CVE-2015-5623) AnalysisThis is a vulnerability that you have been paying attention to over the past few days. wordpress released version 4.2.4 last week, which mentioned fixing

SQL Injection for a Baidu business (leakage of Administrator account and password) Http: // 42.62.39.206/wap/fl2 /? Mo = 1 & sortid = 12 & cm = M3140060 & site = 0 Sortid Parameters available databases [4]:[*] baikan[*] information_schema[*] mysql[*]

Trilogy of illegal Terminal Access Control: control, query, and guide I. Question proposal:Intruders want to bypass network boundary measures and directly intrude into the network through two channels: first, internal hosts "actively" create new