Cloud Security

Detailed analysis of CPU vulnerability SpectrePreface Alpha lab researchers combined the POC to further analyze the vulnerability principles, procedures, and details. In this article, we will analyze the key points of each link in the POC and all

Google Android Media Framework information leakage Vulnerability (CVE-2017-13187)Google Android Media Framework information leakage Vulnerability (CVE-2017-13187) Release date:Updated on:Affected Systems: For Google Android 8.1For Google Android 8.

VMware AirWatch Console Module access restriction bypassing Vulnerability (CVE-2017-4942)VMware AirWatch Console Module access restriction bypassing Vulnerability (CVE-2017-4942) Release date:Updated on:Affected Systems: VMWare Airwatch

Swagger parameter injection Remote Code Execution Vulnerability (CVE-2016-5641)Swagger parameter injection Remote Code Execution Vulnerability (CVE-2016-5641) Release date:Updated on:Affected Systems: Swagger Description: CVE (CAN) ID: CVE-2016

Samba SMB Client Spoofing Vulnerability (CVE-2016-2115)Samba SMB Client Spoofing Vulnerability (CVE-2016-2115) Release date:Updated on:Affected Systems: Samba Samba 4.x-4.2.11Samba Samba 4.4.x-4.4.2Samba Samba 4.3.x-4.3.8Samba Samba 3.x Description:

Apache Struts 2 remote code execution vulnerability in CVE-2016-0785)Apache Struts 2 remote code execution vulnerability in CVE-2016-0785) Release date:Updated on:Affected Systems: Apache Group Struts2 2.0.0 - 2.3.14.1 Description: CVE (CAN) ID:

Wireshark AllJoyn parser Denial of Service Vulnerability (CVE-2015-8715)Wireshark AllJoyn parser Denial of Service Vulnerability (CVE-2015-8715) Release date:Updated on:Affected Systems: Wireshark Wireshark 1.12.0 - 1.12.8 Unaffected

Prevent departing employees from taking customers away, prevent internal employees from leaking data, and prevent employees from leaking data.Preventing leaks of departing employees and internal employees is an important aspect of enterprise

The Cyphort lab found that an infected website of H would mislead visitors to download the toolkit.     In March 9, 2016, the Cyphort lab found an infected website (keng94.com) that directs visitors to download the Toolkit and finally installs a

For many years, IT administrators have to deal with the evolving Windows operating system threats in enterprises. Windows attacks include blue screens, proof-of-concept attacks, and key recorders and spyware used to plagiarize key business data. The

In January 29, 2013, security guard posted a message on its official microblog about emergency drive 1.0Beta, attracting thousands of forwards instantly.According to reports, the emergency drive is a portable operating system that can

Comments: After using a USB flash drive or a mobile hard drive encryption tool to encrypt folders, I cannot use the File sniffer tool to see the encrypted files. When I use Kingsoft drug overlord to scan and find that these files are hidden and

Burp technique for non-Webapp testing (I): interception and proxy listening Burp can be used not only for Web application testing. I often use Burp in mobile and fat client tests. If the application uses the HTTP method, Burp will definitely be your

APK slimming notes for up to 53% Compression1. How do I think about this? APK is the file format of the Android installation package. This topic is a common topic. Many methods and rules have been summarized by our predecessors, including internal

Technology sharing-reinterpreting the Padding Oracle attack in CBC (how to break through HTTPS ?)     Why is it another explanation? Currently, the introduction of the Padding Oracle attack is based on this foreign language. However, this article

SQL Injection exists in the official APP of Shanda game (injection parameter v/type, Boolean blind injection) SQL Injection for APP security Target: Shanda game assistant Butler APPSQL Injection exists in the following areas: (injection parameter

Dahan network 0-day kill Administrator Password Reset Vulnerability (dual official website test) Dahan network 0-day kill, reset the administrator password (test on the official website)The full-system version of kill includes: jcms, jact, jsearch,

Web developers will not notice the passion brought by "AJAX (Asynchronous JavaScript And XML. This technology is largely attributed to the ability to create smart websites like Google Suggest or Web-based applications like Gmail. However, along with

The cause of the vulnerability is not too much. If you are interested in phpcms/api. php files, you can dig more phpcms holes. Main utilization process: Step 1: register a user Http://www.wooyun.in/index.php? M = member & c = index & a = register &

A brute-force attack is an attack that does not use any special means to exhaust various possibilities. It is more officially called a brute-force attack-a variety of possible attacks. For access control, a typical violent attack is that attackers