Cloud Security

Internet Security-security of data transmission and data transmission Internet Security-talking about Data Transmission security. In the Internet world, the security issue of data hijacking is particularly prominent. How can we prevent data

New utility of php dos Vulnerability: CVE-2015-4024 Reviewed 0x01 how WAF is bypassedAccording to the principles of the php dos Vulnerability, when the multipart_buffer_headers function resolves the value corresponding to the header, there are n

Adobe Acrobat Reader Remote Code Injection Vulnerability Cisco Talos researcher recently disclosed a remote code execution vulnerability in Adobe Acrobat Reader DC. Attackers can hide malicious JavaScript code in PDF files. These codes enable

Cisco Policy Suite Information Leakage Vulnerability (CVE-2018-0134)Cisco Policy Suite Information Leakage Vulnerability (CVE-2018-0134) Release date:Updated on:Affected Systems: Cisco Policy Suite Description: Bugtraq id: 102954CVE (CAN) ID:

Paypal vulnerabilities allow you to obtain account balance and recent transaction data The PayPal bug allows you to list the last four digits of the payment method one by one and disclose the account balance and recent transaction data of any given

Adobe releases emergency patches to fix North Korea's CVE-2018-4878 Vulnerabilities Adobe released an emergency fix that fixes two serious remote execution vulnerabilities, including the CVE-2018-4878 vulnerability exploited by North Korea. Last

Manual security check to ensure system security and stable operation Microsoft has heard of File digital signature verification. Microsoft introduces a digital signature mechanism for key files of the system to maintain system integrity. Because

Usage of windows Security Log Analysis Tool logparser Introduction to logparser First, let's take a look at the Logparser architecture diagram and familiarize ourselves with this diagram, which is of great benefit for us to understand and use

Cyrus IMAP index_urlfetch Integer Overflow Vulnerability (CVE-2015-8078)Cyrus IMAP index_urlfetch Integer Overflow Vulnerability (CVE-2015-8078) Release date:Updated on:Affected Systems: Cyrus Cyrus IMAP Server 2.5.6Cyrus Cyrus IMAP Server

The latest Android vulnerability can be hacked into any mobile phone in simple steps At a PacSec hacking conference in Tokyo, researchers from Qihoo 360 demonstrated the use of a vulnerability in the Android Chrome browser targeting JavaScript v8.

Unauthorized access defects in Redis can easily lead to system hacking The Sebug website publishes detailed vulnerability information about unauthorized access defects in Redis. Unauthorized Access defects in Redis can easily lead to system hacking.

Shell scripts monitor Linux system nodes and service CPU memory performance 1. Obtain information #! /Bin/bash # Description: # enter the top information into a file # Author: lone boat # version: 1.0 # Creation Time: 03: 04: 28 PATH =/bin:

Ransomware detection report analysis The ransomware virus sample (Locky) is captured by the security team of Green League technology. After analysis, the ransomware will be transmitted by email. Once the user is infected with the virus, the computer

Getshell can be used for a large-scale universal SCADA System (water, heat gas, and GPRS) (No Logon is required/the impact on major provinces) **. **: 82/Zaozhuang heat Unauthorized access exists in the alarm Area**. **: 82/Alarm/dlgAlarmConfirm.

PHP serialization/object Injection Vulnerability This article is a short story about PHP serialization/object injection vulnerability analysis. It describes how to obtain the remote shell of a host. If you want to test this vulnerability on your own,

Introduction to frontend Automated Testing BackgroundTesting is an indispensable part of a sound R & D system. The front-end also needs to be tested. Your css changes may cause page dislocation and js changes may cause abnormal functions. As the

Technical Analysis of Potato Elevation of Privilege     (Graphic independence)0 × 00 Preface A permission escalation tool named Potato was included a while ago. It was found that the Elevation of Privilege posture of the tool was not the same as

Renren website has SQL injection vulnerability with verification script Renren website SQL Injection Vulnerability Recently, live800 seems to be very popular and wooyun searched for it .....Http://live800.wan.renren.com/live800/loginAction.jsp?

Start with these 13 steps in case of server faults When our team was responsible for O & M, optimization, and expansion for the previous company, we met various systems and basic devices with poor performance in different scales (most of large

BLUTO: DNS detection + domain name guessing + email Enumeration     BLUTO is an information detection and cracking tool that provides DNS detection, brute force cracking, DNS domain transfer, and email enumeration. DNS information and domain