Cloud Security

Five "tricks" to prevent DDoS attacks" Many people are familiar with DDoS attacks. Last week, Linode, a dedicated virtual server provider, suffered a DDoS attack on January 1, December 29, affecting access to its Web servers. The API call and

OpenSSH exposes a high-risk vulnerability, which may expose the private key. OpenSSH releases the new client version and fixes a high-risk vulnerability that may leak the private key. The vulnerability exists in the version used by end users and

Stored XSS in an iPhone (the database address and other information have been returned) 0x01Someone recommended me a software called one password that day:  This can be synchronized to the cloud, and password transmission can be performed on

Hand injection char (60,112, 62) Tips Today we will discuss separator""Or the role of char (60,112, 62) in manual injectionFirst let's take a look...  Http://www.XXX.edu.cn/news/display.php? Id = 3111 & table = news + where + id = null + union +

Corega CG-WLBARGS Privilege Escalation Vulnerability (CVE-2015-7792)Corega CG-WLBARGS Privilege Escalation Vulnerability (CVE-2015-7792) Release date:Updated on:Affected Systems: Corega CG-WLNCM4G Description: CVE (CAN) ID: CVE-2015-7792Corega

Multiple SQL injection vulnerabilities in a substation of Huawei Multiple SQL injection vulnerabilities in a substation of Huawei Http://consumer.huawei.com/support/services/service/tcsReservation/findReservationByReservationNo? Jsonp = jquery19102

PPS MySQL blind injection on a site More than 7 million users G_id in this link has intval.Http: // 211.151.142.213/gamepay/game_pay_main/index? G_id = 314 & sidebar_id = 2 & tid = 8001 & server_type = 106649The g_id parameter of the address below

Multiple SQL Injection packages in a wasu System Rt Http:// OS .wasu.cn/weixiu/delwxd.php? Id = 1Http:// OS .wasu.cn/weixiu/pdxz.php? Id = 1Http:// OS .wasu.cn/weixiu/savewxd.php POST parameter: dz = pd & id = 111111 & pdgs = 1Http:// OS

SQL Injection (union supported) exists in a management system of huatai Insurance) SQL Injection Http: // 219.143.162.218/htwx/indexlis. jsp    python SQLMap/SQLMap.py -u "http://219.143.162.218/htwx/common/cvar/CExec.jsp" --data "txtVarData=328044&

Xinhuanet sub-station injection vulnerability obtained Shell A substation in Xinhuanet has the SQL Injection Vulnerability (you can directly inject and write SHELL) POST/index. php? A = search & m = Book HTTP/1.1Content-Length: 325Content-Type:

Some design defects of a platform in Fujian wanglong can be packaged. you can log on to any user account to consume others' balances at will. Design defect packaging, allows you to log on to any user account to consume others' balances at

A site under Baidu has severe design defects Img src = "/upload/201511/30143343 e5dfc2f4553a0fde8f89dc00f8a889b5.png" alt = "2.png"/>Baidu bookstore domain name is ks.baidu.comI first registered a bookstore number,Then open http: //

McAfee Application Control swin. sys Kernel Driver Denial of Service Vulnerability (CVE-2016-1715) Affected Systems: McAfee Application Control 6.2.0McAfee Application Control 6.1.3McAfee Application Control 6.1.2McAfee Application Control

Cisco Jabbar chat client vulnerable to man-in-the-middle attacks Cisco announced that its chat client Jabbar has a security vulnerability and is vulnerable to man-in-the-middle attacks.This vulnerability exists in the Jabbar on the Windows platform.

A data center may affect millions of domain names, including bat \ 360 (involving a large number of company ICP filing information) Rt, which is not repeated before Address :**.**.**.**Connect to ftp, idczk, 123456, found in the old system A

Ipswitch WhatsUp Gold SQL injection vulnerability in CVE-2015-8261) Affected Systems:Ipswitch WhatsUp Gold Description:CVE (CAN) ID: CVE-2015-8261WhatsUp Gold provides a complete and easy-to-use monitoring mechanism to comprehensively monitor

Build your own yara Database I have seen some articles about yara before, but it is basically a translation article about how to write rules. However, in actual analysis, the number of rules or the yara rule repository is too small, and many files

DVWA Series 8 medium-level Command Execution Vulnerability Set DVWA Security to medium, and click "View Source" in Command Execution to View the webpage Source code.Here, the variable $ target used to receive the IP address entered by the user is

Elsearch sensitive information leakage may cause all its domain names to be hijacked Easou.com Sensitive Information Leakage Email Address: [email protected]  Whois lookup its domain nameDomain names are registered on www.net.cn, and

Exploring phishing emails: How do hackers forge emails? Disclaimer: This site provides security tools and procedures (methods) that may be offensive and only for security research and teaching. You are at your own risk! Nowadays, phishing emails are