Cloud Security

The iBoot source code of key components of iOS 9 has been leaked to GitHub and has been deleted urgently. Recently, the iOS system, known for its security, has been exposed to iBoot source code leaks and released to GitHub. This is almost the

Is the chip Security Vulnerability "Invincible "? Do these three things well to protect you from attacks and security vulnerabilities. On September 6, January 4, two CPU vulnerabilities, Meltdown and Spectre, were released by security agencies

Samba MS-SAMR/MS-LSAD man-in-the-middle attack Vulnerability (CVE-2016-2118)Samba MS-SAMR/MS-LSAD man-in-the-middle attack Vulnerability (CVE-2016-2118) Release date:Updated on:Affected Systems: Samba Samba 3.6.0 － 4.4.0 Description: CVE (CAN) ID:

Ingenious Process Analysis of Windows desktop monitoring by using the HDR 0x00 Preface During the penetration test, if you need to obtain more information about the host, the operations on recording the System screen are more direct and effective

Android Qualcomm Privilege Elevation Vulnerability (CVE-2016-0819)Android Qualcomm Privilege Elevation Vulnerability (CVE-2016-0819) Release date:Updated on:Affected Systems: Android 6.0 Description: CVE (CAN) ID: CVE-2016-0819Android is a

Joomla deserialization Vulnerability Detection  In December 15, 2015, major security vendors in China paid attention to a message about the Joomla Remote Code Execution Vulnerability from overseas sites. Then we started a round of vulnerability

Roundcube webmail Cross-Site Scripting Vulnerability (CVE-2015-8105)Roundcube webmail Cross-Site Scripting Vulnerability (CVE-2015-8105) Release date:Updated on:Affected Systems: RoundCube Webmail RoundCube Webmail 1.1.x-1.1.3 Description: CVE

Adobe Shockwave Player Memory Corruption Vulnerability (CVE-2015-7649)Adobe Shockwave Player Memory Corruption Vulnerability (CVE-2015-7649) Release date:Updated on:Affected Systems: Adobe Shockwave Player Description: CVE (CAN) ID: CVE-2015-7

Wireshark gsm rlc/MAC parser DoS Vulnerability (CVE-2015-6245)Wireshark gsm rlc/MAC parser DoS Vulnerability (CVE-2015-6245) Release date:Updated on:Affected Systems: Wireshark Wireshark 1.12.x Description: Bugtraq id: 76382CVE (CAN) ID: CVE-2015-62

How to build a automated analysis platform for Cuckoo malware 0x00 cuckoo Overview Cuckoo is an open-source automated malware analysis system. It is mainly used to analyze malware on the windows platform, but its framework supports both Linux and

Use Radare2 and Ruby to develop a malware configuration parser     Radare2 (an open-source reverse engineering platform) has received a lot of attention recently. Here I not only want to browse some documents, but also try to use Radare to traverse

If you don't pay a ransom, you will be taken public on the Internet: Koler, The ransomware on Android phones. This is a new mobile phone ransomware in Canada. When a mobile phone user visits an adult website, the malware is infected and ransomware.

Hongkang life can directly reset any user password (reset in seconds) without any restrictions to view sensitive information of any user. 666Detailed description: Review: I rejected the previous one. This adds something.Followed by hongkang Life

Wangkang technology Huiyan cloud security platform has the second-level password change Vulnerability (Official Website account \ Sina )1. register an account and receive an email to continue registration, 2. Open the url in the mailbox and

Oracle Releases emergency Java security updates to fix a critical vulnerability Oracle has released an emergency Java security update that fixes a critical vulnerability (CVE-2016-0636, CNNVD-201603-377 ).Vulnerability OverviewOracle responds so

The Onamae main site, Japan's largest domain name Registrar, has the SQL injection vulnerability. SQL injection vulnerability in the main site of the largest domain name registrar in Japan) Http: // **. **/guide/details. php? G = 10% 20AND % 201 = 1

How to Set HTTPS policies for old browsers A few days ago, a friend asked me: we all said we recommend using the Qualys SSL Labs tool to test SSL security. Why are some of the most powerful Security manufacturers having low scores? I think this

Malware Reverse Analysis Series (1): identifies important code structures in assembly languages This series of articles are related to malware courses. Therefore, we should start with the complete structure of PE and ELF files. Another important

Situation Awareness-Based Network Security Event Prediction Method Analysis Machine Learning is applied in the security field, especially in various attack detection (external intrusion detection and internal threat detection). I believe many people

Necurs. P2P: A New Type of peer-to-peer network   Last week, I received a botnet analysis sample from a security researcher who thought it was a point-to-point peer-to-peer network, but after I analyzed it for a few days, I can determine that this