Cloud Security

SniffIt 'sn _ overflow file. c' multiple Stack Buffer Overflow Vulnerability Release date:Updated on: Affected Systems:SniffitDescription:Bugtraq id: 71318CVE (CAN) ID: CVE-2014-5439 Sniffit is a data sniffer and monitoring tool. It can run on a

Cisco Intrusion Prevention System Denial of Service Vulnerability (CVE-2014-3402) Release date: 2014-10-07Updated on: 2014-10-09 Affected Systems:Cisco IPSDescription:Bugtraq id: 70278CVE (CAN) ID: CVE-2014-3402 Cisco Intrusion Prevention System

Bugzilla 0-day vulnerability exposure 0-day vulnerability details The widely used bug Tracking System Bugzilla found a 0-day vulnerability, allowing anyone to View Details of vulnerabilities that have not been fixed and are not yet made public.

Apple's iCloud security vulnerabilities continue to ferment: another wave of nude photos Another batch of nude photos of celebrities were revealed on the internet, reported the Daily Beast. The victims included supermodel karakay dunyi and the

Level 10 major Bash risk vulnerabilities discovered! Linux orange warning Linux has always been known for its security, but foreign network security experts recently warned that the open-source software Linux has found a security vulnerability, and

CURL/libcURL SSL certificate verification Security Restriction Bypass Vulnerability Release date:Updated on: Affected Systems:CURLDescription:--------------------------------------------------------------------------------Bugtraq id: 66296CVE (CAN)

IBM Lotus Sametime configures a small service program to verify Security Vulnerabilities Release date: 2011-10-31Updated on: 2011-10-31 Affected Systems:IBM Lotus Sametime 8.xIBM Lotus Sametime 7.xDescription:---------------------------------------

Mozilla Firefox/Thunderbird certificate Parsing Vulnerability (CVE-2014-1560) Release date:Updated on: Affected Systems:Mozilla Firefox 31Mozilla Thunderbird 31Description:------------------------------------------------------------------------------

Misunderstandings about DDoS attacks DDoS attacks are on the rise, and experts are also trying to defeat them. Analysts predict that the global DDoS prevention market will grow by 2013 from 2018 to 19.6%. However, many people do not know how the

Data link layer network security protection When talking about security attacks, we often think of attacks outside the lan. These attacks come from the Internet and target enterprise network devices and servers; LAN security problems in enterprises

Intranet penetration-domain penetration Basics1. Domain environment construction + recognition domain + experiment environment 1. Preface:I have always wanted to penetrate the domain, but unfortunately I have not met a good domain environment. I

Automatically compare and delete scripts after backing up Files Recently, the company is working on a data backup plan, so I have compiled two backup documents, "scp automatic copy script" and "rsync + inotify for real-time file synchronization

The hacker cannot hack rice-the author of the QQ account stealing trojan leaked his account and password information. Recently, an interesting qq worm was found during the monitoring of qq Trojans. Unlike the previous qq sticks, the trojan will

NITC Enterprise Edition SQL Injection allows you to reset any User Password NITC Enterprise Intelligent Marketing System function getip( ){ if ( isset( $_SERVER ) ) { if ( isset( $_SERVER[HTTP_X_FORWARDED_FOR] ) ) {

Discuz! Public Platform Plug-in patches bypass unauthorized deletion of databases Discuz! The public Platform Plug-in patches can bypass unauthorized database deletion and bypass Baidu cloud waf.  The previous vulnerability was published by getshell.

Free Open-source album piwio & lt; = v2.6.0 SQL Injection Vulnerability (0day) Piwio is one of the world's most famous free open-source album systems. It is based on the PHP + MySQL architecture. This framework is easy to build and favored by

Cookie Theft and session hijackingI. Basic Features of cookies If you do not know the cookie, go to wikipedia to learn about it.Http request Each request sent by the browser to the server carries a cookie: Host: www.example.org Cookie: foo = value1;

[Anti-spoofing art]: attacker art (2)There are a wide range of ways for social engineering attackers to attack. In the previous article, we talked about how attackers can use seemingly harmless information to gain the trust of the target. This

How to perform Web penetration testing Web penetration testing can be considered from the following aspects: 1. SQL Injection (SQL Injection) (1) how to test SQL injection? First, find the URL page with parameters passed, such as the search page,

Security Test-cross-site scripting (xss) Cross-site scripting (XSS) is an important and common security vulnerability. XSS indicates malicious code input. If the program does not verify the input and output, the browser will be controlled by