Cloud Security

Analyze database security vulnerabilities from nine perspectives Database vulnerabilities exist in multiple ways. Because each actual scenario is composed of multiple dimensions, database vulnerabilities can be classified from different perspectives.

PHP Buffer Overflow Vulnerability (CVE-2015-3329)PHP Buffer Overflow Vulnerability (CVE-2015-3329) Release date:Updated on:Affected Systems: PHP Description: Bugtraq id: 74240CVE (CAN) ID: CVE-2015-3329PHP is a widely used scripting

GNU glibc Multiple Buffer Overflow Vulnerability (CVE-2015-1781)GNU glibc Multiple Buffer Overflow Vulnerability (CVE-2015-1781) Release date:Updated on:Affected Systems: GNU glibc Description: Bugtraq id: 74255CVE (CAN) ID: CVE-2015-1781Glibc

ProFTPD Information Leakage Vulnerability (CVE-2015-3306)ProFTPD Information Leakage Vulnerability (CVE-2015-3306) Release date:Updated on:Affected Systems: ProFTPD Project ProFTPD Description: Bugtraq id: 74238CVE (CAN) ID:

WebKit Memory Corruption Vulnerability (CVE-2015-1152)WebKit Memory Corruption Vulnerability (CVE-2015-1152) Release date:Updated on:Affected Systems: Apple Safari Apple Safari Apple Safari Description: Bugtraq id: 74525CVE (CAN) ID: CVE-2015-

SQLite 'src/where. c' Memory Corruption VulnerabilitySQLite 'src/where. c' Memory Corruption Vulnerability Release date:Updated on:Affected Systems: SQLite Description: Bugtraq id: 74313SQLite is an embedded database.SQLite has the remote

Google Chrome post-release Reuse Vulnerability (CVE-2015-1243)Google Chrome post-release Reuse Vulnerability (CVE-2015-1243) Release date:Updated on:Affected Systems: Google Chrome Description: CVE (CAN) ID: CVE-2015-1243Google Chrome is a Web

Pillow plugin 2kimageplugin plug-in Denial of Service Vulnerability (CVE-2014-3598)Pillow plugin 2kimageplugin plug-in Denial of Service Vulnerability (CVE-2014-3598) Release date:Updated on:Affected Systems: Python Software Foundation Pillow

WordPress WP Photo Album Plus Cross-Site Scripting VulnerabilityWordPress WP Photo Album Plus Cross-Site Scripting Vulnerability Release date:Updated on:Affected Systems: WordPress WP Photo Album Plus Description: WP Photo Album Plus is a

Google Chrome DoS Vulnerability (CVE-2015-1250)Google Chrome DoS Vulnerability (CVE-2015-1250) Release date:Updated on:Affected Systems: Google Chrome Description: CVE (CAN) ID: CVE-2015-1250Google Chrome is a Web browser tool developed by

A server intrusion experience In the morning, I received a bunch of alert emails from nagios, all of which were critical. The disk space of a machine was insufficient. I checked the disk space and found-12 a.m. (the server is located in the United

How to build a server monitoring system using Monit? (1) Many Linux administrators rely on a centralized remote monitoring system (such as Nagios or Cacti) to check the health of the network infrastructure. Although the centralized monitoring

Tampering with HTTP requests by bypassing Web authorization and authentication What is an HTTP request?Hypertext Transfer Protocol (HTTP) provides multiple request methods to communicate with web servers. Of course, the original intention of most

How to Prevent SQL injection attacks on JSP websitesSQL injection is currently a popular attack method that can cause various damages. for JSP websites, if they are neglected, this problem exists: 1. Obtain the website administrator password, 2. You

Injection learning records in MCIR Environment: xampp-win32-5.6.3-0-VC11 mcirPreface Mcir is also one of the top ten, but how does one feel that no one has written such information about it? This is really hard for a newbie to learn this system, and

Wordpress Comment feature at the beginning and end of Xss Recently, Wordpress's program commented on the feature of Xss on Weibo, and the repair process is also a wave of twists and turns. Next, let me tell you one by one.WordPressThis problem is

An API defect of Youku leads to credential stuffing to obtain VIP accounts (proving that a large number of VIP users can be obtained) A library hit query VIP caused by an API defect in Youku Step 1:Use android-based Youku to log on and capture

Netease enterprise mail storage xss can obtain user cookies Storage Type xss ~ The email body is directly xss ~Netease enterprise mail display mail body will automatically convert the http://xxx.xxx into a http://xxx.xxx. However, improper

SQL Injection exists in an important system of GreenTree Inn A certain important system in GreenTree Inn has 14 databases involved in SQL injection. Problem: POST /op/Module_ERP/UserActive.aspx?userid=1997* HTTP/1.1Host:

DNSPod domain names do not have all the authentication permissions (this can cause the domain name to be maliciously taken over for use) and Solutions Because DNSPOD does not have all the permissions to verify the domain name when adding a domain