Cloud Security

WAF development-Analysis of Cookie security protection function, wafcookie I. Preface The Cookie security protection function mainly achieves the following two goals: 1. Prevent XSS attacks from stealing user cookies 2. Prevent Cookie-based SQL

Annual inventory check: 2017 how to defend against the top ten high-risk vulnerabilities of mobile apps in 2018 and 2017 of mobile apps From a large wave of Android banking Trojan attacks in January to disclosure of citizen information leaks in the 3

Linux Kernel 'crypto/pcrypt. c' Local Denial of Service Vulnerability (CVE-2017-18075)Linux Kernel 'crypto/pcrypt. c' Local Denial of Service Vulnerability (CVE-2017-18075) Release date:Updated on:Affected Systems: Linux kernel Description:

Linux Kernel 'net/rds/rdma. c' Local Denial of Service Vulnerability (CVE-2018-5332)Linux Kernel 'net/rds/rdma. c' Local Denial of Service Vulnerability (CVE-2018-5332) Release date:Updated on:Affected Systems: Linux kernel Description:

115 patches are required to fix the Android Stagefright Bug On June 23, last July, security researchers disclosed the Android Bug known as Stagefright. The vulnerability exists in the code library that processes media formats. It allows attackers

Google Chrome srt_field_trial_win.cc Spoofing Vulnerability (CVE-2016-1693)Google Chrome srt_field_trial_win.cc Spoofing Vulnerability (CVE-2016-1693) Release date:Updated on:Affected Systems: Google Chrome Description: CVE (CAN) ID: CVE-2016-

Cisco APIC-EM API management notification Spoofing Vulnerability (CVE-2016-1386)Cisco APIC-EM API management notification Spoofing Vulnerability (CVE-2016-1386) Release date:Updated on:Affected Systems: Cisco Application Policy Infrastructure

Analysis of QQ simulated login implementation 0x00 Overview It was originally issued together with the previous article. Later, it was put on hold. I'm glad to have been involved in the discussion and discussion. (B) slot (4). In fact, I don't have

Ipswitch WhatsUp Gold SQL injection vulnerability in CVE-2015-8261)Ipswitch WhatsUp Gold SQL injection vulnerability in CVE-2015-8261) Release date:Updated on:Affected Systems: Ipswitch WhatsUp Gold Description: CVE (CAN) ID:

Click fraud malware poses a greater threat Damballa's latest report identifies malware evolved from click fraud attacks. How does it work? What I know is that sometimes low-risk attacks often cause more serious harm, but we do not have the human

TIPS: how to hide and prevent computer encrypted folders from being decrypted Once a day, the computer in the house has been infected, and the "encrypted folder" in the computer cannot be hidden. The Goddess in the hard disk has a small hiding place,

Wireless burglar alarms have vulnerabilities that allow intruders to access the system. Security systems used by more than 0.2 million of households have an irreparable vulnerability, which allows tech-savvy thieves to release alerts hundreds of

You are not afraid of getting your pants removed. Password security can be guaranteed in this way. In the previous article "Designing the correct posture of a secure account system", I mainly proposed some design methods and ideas, but did not

Comments: I found that McAfee could not automatically update the virus database. I don't know what the problem is. Later I read the following method from the Internet and tried it. It feels good. Generally, there is no problem after I reinstall it.1

I recently learned how to shell and found a shelling program eXPressor 1.71 to play !!!! Find eXPressor. v1.4.5 first. I think there may be a single list of programs written by the author. Soon I came to oep to see that its features should be

I haven't played the opposite thing for a long time. I have the right to review it today and take a note by the way.   Demo used in this article: Http://download.csdn.net/detail/ccnyou/4540254 The attachment contains the demo and the original

Reset any user password in a system of Tongcheng Network (sensitive data is easily leaked) The problem occurs in the self-help ebk system. In order not to affect your online account business, use a test account for demonstration.Address: http://ebk.

Online shopping security: Home of Maternal and Child mobile APP involving hundreds of thousands of user ID card information Review. Isn't it on the wall yet? 1. The Code is as follows:  POST http://app.api.muyingzhijia.com/v1/GetUserIdentity HTTP/1.1

Use Let & #39; s Encrypt to protect your packets Let's Encrypt is a free SSL Certificate launched at the end of last year, and there is basically no limit to applying for this certificate, as long as you prove that you are the domain name owner, you

XML security-XML attack methods you don't know The XML eXtensible Markup Language is designed to transmit and store data in various forms. Some features designed in XML, such as XML schemas (following XML Schemas specifications) and documents type