Cloud Security

Mozilla Firefox XSS vulnerability in CVE-2015-7191)Mozilla Firefox XSS vulnerability in CVE-2015-7191) Release date:Updated on:Affected Systems: Mozilla Firefox Description: CVE (CAN) ID: CVE-2015-7191Mozilla Firefox is an open-source web

Detailed explanation of Web server security attacks and protection mechanisms, and detailed explanation of web Server mechanismsWeb Server attacks often use Web server software and configuration vulnerabilities. The best practice for these

CBC byte flip attack-101 Approach 0x00 translator's preface Topic articles in drops: using CBC bit reverse attack to bypass encrypted session tokens The origin is a question produced by candy. I can see that the author of the original article

OpenSSL BN_GF2m_mod_inv Function Denial of Service Vulnerability (CVE-2015-1788)OpenSSL BN_GF2m_mod_inv Function Denial of Service Vulnerability (CVE-2015-1788) Release date:Updated on:Affected Systems: OpenSSL Project OpenSSL OpenSSL Project

Sap hana SQL Injection Vulnerability (CVE-2015-4159)Sap hana SQL Injection Vulnerability (CVE-2015-4159) Release date:Updated on:Affected Systems: Sap hana Web-based Development Workbench Description: CVE (CAN) ID: CVE-2015-4159Sap hana is a

Apache Hive Authentication Vulnerability (CVE-2015-1772)Apache Hive Authentication Vulnerability (CVE-2015-1772) Release date:Updated on:Affected Systems: Apache Group Hive 1.1.0Apache Group Hive 0.11.0－1.0.0 Description: CVE (CAN) ID: CVE-2015-1772

Apple TV and iOS Local Security Restriction Bypass Vulnerability (CVE-2015-1062) Release date:Updated on: Affected Systems:Apple TV Apple iOS Description:Bugtraq id: 73003CVE (CAN) ID: CVE-2015-1062 IOS is an operating system developed by Apple

Palm reading app account password retrieval bypass/account information leakage/use others' accounts to buy books for themselves and other issues I wanted to read a book quietly, but the book was charged. Then I detected various vulnerabilities .... 

Etiko CMS index. php Cross-Site Scripting Vulnerability Release date:Updated on: Affected Systems:Etiko CMSDescription:CVE (CAN) ID: CVE-2014-8505 Etiko CMS is a content management system. The Etiko CMS does not validate the index. A cross-site

Apple Mac OS X ioblustmthhcicontroller Local Privilege Escalation Vulnerability Release date:Updated on: Affected Systems:Apple Mac OS X 10.9.5Apple Mac OS X 10.9.4Description:Bugtraq id: 70894 OS x (formerly Mac OS X) is the latest version of Apple'

Unauthorized access defects in Redis can easily lead to system hackingVulnerability summary Redis is bound to 0.0.0.0: 6379 by default. This will expose the Redis service to the public network. If authentication is not enabled, attackers can access

Return-into-libc Attack and Defense This article first analyzes the principles of return-into-libc attacks, and introduces the experimental processes and results of traditional return-into-libc attacks on different platforms. Then, this article

Tutorial on DNS spoofing-Cain on Windows Today, we will first introduce how to use the famous Cain tool in windows for DNS Spoof (that is, DNS Spoofing). This tutorial is mainly intended for new users. Therefore, each step is captured in detail, I

Simple Security Configuration for CentOS 6 servers Linux is an open system that allows you to find many ready-made programs and tools on the network. This facilitates both users and hackers, because they can also easily find programs and tools to

Ransomware CoinVault: Get the money and give you a chance to restore the file Restore a file for free Recently, a new software named CoinVault ransomware, which uses 256-bit AES to encrypt the victim's hard disk. The software has a similar interface

Uses the CBC bit reverse attack to bypass the encrypted session token0x01 what is CBC bit inversion technology? The full name of the CBC mode is the Cipher Block Chainning, which is called because the ciphertext group wants to connect to each other

Defcon Quals challenge 2015 -- Twentyfiveseventy level WriteUp   Not long ago, the Defcon Qualification ctf I attended was very interesting. I want to share with you the detail analysis of the longest level I used in this challenge. This level is

Privacy leak killer: Flash permission reflection 0x00 PrefaceI have always thought that this risk has been taken seriously, but recently I accidentally discovered that many websites still have this defect. Some of them are commonly used email

Inke cartoon Android app SQL injection of hundreds of thousands of user information in an emergency Inke cartoon Android APPSQL injection vulnerability: more than 0.2 million users in an emergency Baidu mobile app search and download show that there

Yonyou CRM Injection Vulnerability (No Logon is required to kill all versions) A system injection vulnerability in UFIDA allows you to kill all versions without logon. Yonyou TurboCRM has common SQL injection.Http://crm.varsal.com.cn: 8081/login.