Cloud Security

Source: hacker Base With the development of ASP technology, more and more websites are developed based on ASP technology on the network. The support for ASP technology is already a basic function of IIS server in windows. However, there are more and

Hello everyone. Today's course: ASP + ACCESS prevention Author: David Source: China Network Security Association-http://chinansa.com -----------------------------------------------Today, I am bored. I found ASP security in Baidu, But I found N

Team: t00ls Author: Cond0rA silly VulnerabilityCache must be enabled for useFirst look at the codeBook. php$ Kd_cachedir = "./cache ";If ($ kd_book_cache = "ture") {// cache must be enabled$ Lastflesh = @ filemtime ($ kd_cachedir.

  Unknown remote login Port It's too confusing to execute netstat-. What should we do? Read the registry and set HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Control \ Terminal Server \ Wds \ rdpwd \ Tds \ tcp PortNumber. The PHPshell does

 This article is translated from NLP. IIS is a web server application created by Microsoft using the Microsoft windows function extension module. It is the third most popular server in the world. Vulnerability description: The vulnerability team

In the remote terminal (338920.mstsc.exe) and virtual desktop, you can capture the password. Generally, when you run this program on a remote terminal, the following message is displayed: the storage space is insufficient and the command cannot be

Oracle Java Runtime Environment (JRE) is a solution that provides a reliable Runtime Environment for JAVA applications. The jmx. mbeanserver. JmxMBeanServer class in Oracle JRE7 has the Sandbox Bypass Vulnerability, which allows remote attackers to

Whether you are using Windows XP or the trendy Windows 7/8, the login password is the first line of defense to protect system security. In order to protect system security, we often try our best to increase the complexity of the password and think

1. IntroductionOpenSSL is a powerful encryption toolkit. Many of us are already using OpenSSL to create RSA private keys or Certificate Signing requests (CSR ). However, do you know that OpenSSL can be used to test the computer speed? Or can I use

URL spoofing vulnerability caused by poor implementation of some URL protocolsIn safari, about: // xxxxxxx is regarded as a valid resource page, which has the same effect as about: blank. It can inherit the valid script origin, so we can open an

Disabling IIS to execute file types not in our plan can significantly improve the security environment of the server. The following describes how to disable the script ing we do not need.Start IIS manager, right-click the website, and select

Previous: http://www.bkjia.com/Article/201302/189056.htmlURL spoofing vulnerability caused by poor implementation of some URL protocolsBecause firefox does not specify mediatype when implementing the data uri protocol is also a legal data url, we

In Windows, image hijacking can redirect specific programs to custom programs without replacing or setting file associations. Use NotePad2 to replace the built-in notepad and import the following registry: for Windows Registry Editor Version 5.00

Summary: --------------- CVE-ID: CVE-2013-1362CVSS: Base Score 7.5CVSS2 Vector: AV: N/AC: L/Au: N/C: P/I: P/A: P/E: u/RL: OF/RC: UC/CDP: N/TD: N/CR: L/IR: L/AR: LVendor: NagiosAffected Products: NRPEAffected Platforms: AllAffected versions:

Most of the time I got the shell, and then I couldn't execute a simple command in the course or Shell! It indicates that the permission is very dead or is forbidden by management! Here, NC has rebounded SHELL back to local to raise privilege! Let's

Summary I found a reflected XSS vulnerability in JW Player 5. the developers at LongTail Video have released JW Player 6, which is not vulnerable to this issue. they do not plan to update JW Player 5 to mitigate this vulnerability; I wocould

The su request used by CyanogenMod 10. x can be hijacked. As a result, the normal request cannot be responded, and the app fails to escalate the permission. Although the writing vendor is CyanogenMod, this version of su may be used by many other ROM.

XClient 802.1x client 2.0 is a commonly used H3C802.1x protocol authentication client in universities. Because the software does not determine the length field in the received data packet, the buffer overflow occurs, A Denial-of-Service

A design vulnerability exists in the stored-value card of the kangji water vending machine. The encrypted sector is simple, and the stored-value amount is clearly indicated. It is easy to tamper with without a reconciliation mechanism.According to

First: 1. the server has enabled the terminal port (the terminal port may not be 3389 and can be queried by itself. the sticky key function of the server is lossless, as long as it can be popped up normally. the server has not disabled registry