Cloud Security

OpenStack Neutron Security Restriction Bypass Vulnerability (CVE-2015-5240)OpenStack Neutron Security Restriction Bypass Vulnerability (CVE-2015-5240) Release date:Updated on:Affected Systems: openstack Neutron openstack Neutron

Diagnosis and blocking of SYN flood attacks on Linux server, linuxsynThis article describes how to diagnose and block SYN flood attacks on Linux servers. For more information, see 1. IntroductionSYN Flood is one of the most popular DoS (Denial of

Linux Kernel Local Security Restriction Bypass Vulnerability (CVE-2015-6666)Linux Kernel Local Security Restriction Bypass Vulnerability (CVE-2015-6666) Release date:Updated on:Affected Systems: Linux kernel Description: Bugtraq id: 76480CVE

Hacking Team: 0-day vulnerability Market Vglad Tsyrklevich shared an article on the Hacking Team's leaked information about 0-day vulnerability exploits in the transaction market. 0-day vulnerability transactions are not widely known, there have

AlienVault Unified Security Management Plugin Remote Code Execution VulnerabilityAlienVault Unified Security Management Plugin Remote Code Execution Vulnerability Release date:Updated on:Affected Systems: AlienVault USM Description: CVE (CAN)

Siemens Ruggedcom WIN product Remote Security Restriction Bypass Vulnerability (CVE-2015-1448) Release date:Updated on: Affected Systems:Siemens Ruggedcom WIN 72xxSiemens Ruggedcom WIN 70xxSiemens Ruggedcom WIN 52xxSiemens Ruggedcom WIN

GitLab not affected by Git Security Vulnerabilities CVE-2014-9390 Yesterday, Git reported a serious security vulnerability. This vulnerability affects all official Git Client versions. Due to this vulnerability, git.oschina.net, GitLab.com, GitLab

Arbitrary Command Execution Vulnerability in tnftp ftp client (CVE-2014-8517) Release date:Updated on: Affected Systems:NetBSD tnftpDescription:CVE (CAN) ID: CVE-2014-8517 Tnftp is a widely used NetBSD FTP client. Tnftp has a security vulnerability

Google Chrome For iOS Security Vulnerabilities (CVE-2014-3187) Release date: 2014-10-07Updated on: Affected Systems:Google Chrome For iOS Description:Bugtraq id: 70272CVE (CAN) ID: CVE-2014-3187 Google Chrome is a Web browser tool developed by

Four Common evasion techniques for malware Malware escaping technology is always evolving. At the RSA Conference last month, the co-founder of Lastline told a picture of evading technology development. This report titled "exposure and deconstruct of

Reverse BASICS (13) JAVA (3)In the simple example of the 54.13 array 54.13.1, we first create an array with an integer of 10 and initialize it. public static void main(String[] args){ int a[]=new int[10]; for (int i=0; i  Public static void

Reverse basic Finding important/interesting stuff in the code (2) zing Chapter 2 Call assert Sometimes, the emergence of assert () macro is also useful: Usually this macro will leak the source file name, row number and condition. The most useful

Anti-database theft-Web Front-end slow Encryption0x00 Preface The world's martial arts, only fast. However, different passwords are encrypted. The faster the algorithm, the easier it is to break.0x01 brute force cracking Password cracking means

Express Delivery security-Asian wind Express Delivery Main Site SQL Injection Command Execution causes the entire site to fall Express safety of the Asian wind fast transport main site SQL Injection Command Execution caused the whole site fell into

Waf xss bypass posture Due to the wide use of application firewalls, it is necessary to test WAF's ability to defend against xss attacks. Of course, all the experiments are to prove that the vendor must eliminate the vulnerability from the root

Web Application Security Defense 100 TechnologyHow to defend against web Application Security is a question that every web security practitioner may ask. It is very difficult to answer. It is easy to be too superficial or theoretical. To clarify

Analysis of malicious IP. Board CMS redirection IP. Board CMS is a famous CMS system that allows users to easily create and manage online communities. Sucuri researchers recently discovered a redirection for IP. Board. After analysis, the

Wdcp X-Forwarded-For Injection Vulnerability Analysis 0x1 vulnerability updates on the official website: 20130804 (2.5.8) Fix an SQL injection security vulnerability and leak database information (must be upgraded) Description 2.5.7 and earlier

PHPOK's latest foreground SQL Injection Vulnerability (administrator password can be obtained directly) An SQL injection vulnerability exists in a function in the front-end of the latest PHPOK version. You can use UNION injection to obtain the

How to perform Web penetration testing Web penetration testing can be considered from the following aspects: 1. SQL Injection (SQL Injection) (1) how to test SQL injection? First, find the URL page with parameters passed, such as the search page,