Cloud Security

Google Chrome Security Vulnerabilities (CVE-2015-1265)Google Chrome Security Vulnerabilities (CVE-2015-1265) Release date:Updated on:Affected Systems: Google Chrome 43.0.2357.65 Description: Bugtraq id: 74727CVE (CAN) ID: CVE-2015-1265Google Chrome

WebGate WinRDS 2.0.8 StopSiteAllChannel Stack Overflow Vulnerability Release date:Updated on: Affected Systems:Webgate WinRDS 2.0.8Description:CVE (CAN) ID: CVE-2015-2094 WebGate WinRDS can transmit DVR video streams over the network. In WebGate

HP Intelligent Provisioning Vulnerability (CVE-2015-2111) Release date:Updated on: Affected Systems:HP Intelligent Provisioning 1.40-1.60Description:CVE (CAN) ID: CVE-2015-2111 HP Intelligent Provisioning is a server configuration tool. On

SEED experiment: Buffer Overflow Vulnerability Experiment 1. Experiment descriptionBuffer overflow refers to the situation where a program attempts to write data beyond the pre-allocated fixed length to the buffer. This vulnerability can be

Ngxin prevents concurrency (whitelist, with proxy on the front end) Nginx has two modules to control the "quantity" and "Speed" of access. Simply put, it controls the maximum number of accesses you have at the same time and the maximum number of

Seagate NAS Remote Code Execution Vulnerability OJ Reeves, a foreign security researcher, discovered a remote code execution vulnerability in Seagate NAS and reported it to the official website on July 15, October 7. However, the vulnerability was

Sogou Input Method remote code execution can maliciously hijack user input The sogou input method is used for remote code execution. All the content entered by the user, including the password, can be viewed at a glance. The latest version of sogou

Asus releases patches to fix vro Vulnerabilities [NOTE 1] The infosvr service of the Asus router has a security vulnerability that can be exploited to execute arbitrary commands on the local network. The affected router models include RT-N66U,

Linux Kernel 'vdso _ addr () 'Function Local Security Restriction Bypass Vulnerability Release date:Updated on: Affected Systems:Linux kernel Description:Bugtraq id: 71990CVE (CAN) ID: CVE-2014-9585 Linux Kernel is the Kernel of the Linux

Zenoss Core version check Remote Code Execution Vulnerability Release date:Updated on: Affected Systems:Zenoss Core Description:CVE (CAN) ID: CVE-2014-6261 Zenoss Core is an open-source IT monitoring solution. In versions earlier than Zenoss

Test the remote network topology by monitoring the TTL response   Sometimes, the network administrator can configure an internal network to implement communication between a single host and other hosts at different levels. A single Internet Protocol

Measure the test taker's knowledge about how to deal with external DDoS attacks. Linux uses Iptalbes to disable PHPDDOS from sending packets. The penalty policy of us vps for DDOS attacks is, Further violations will proceed with these following

Summary by overseas security researchers: various methods to maintain Trojans for a long time   In this post, I will dig deeper into several common methods to maintain Trojans. Simply using the local resources of the infected Windows system, you can

How to deal with poisoned USB flash drives USB flash drives are a storage tool that we often use, but sometimes we may suffer from viruses when copying data online. How can we deal with the poisoned USB flash drives? Step 1: Insert a USB flash drive,

Bootkit hard drive Forensics-Lecture 2 DriverStartIo routine In the previous article, we can know that DriverStartIo is used by micro ports to execute some hard disk I/0 requests. Like the IoCallDriver routine, DriverStartIo generally runs two

Use HTTP Headers to defend against WEB attacks (Part1) We often see various attack methods such as Xss, clickjacking, and session hijacking. In this series of articles, we will introduce various HTTP headers that can be used to defend against common

WIFI universal key password query interface algorithm cracking (unlimited query of users' AP plaintext passwords) All Apps involve communication interfaces. After reading the APP with the master key, the plaintext HTTP protocol is simple. There is a

Youyou mailgard webmail Arbitrary File Upload causes getshell (no login required) 1. Unauthorized access to some files (accessible without logon) Files that do not contain global. php In the root directory can be directly accessed without

Ecshop one verification code bypass logic Vulnerability A logic vulnerability causes Bypassing Although the verification code is encrypted, there are still some logic problems.The problem lies in.. \ Shortdes \ cls_captcha.phpThrough the

Data-Hack SQL Injection Detection0x00 Preface I was planning to translate this series of tutorials. I came to the article later and found that the teaching process was not very friendly, so I followed his ideas, but I made a lot of changes, another