Cloud Security

Cisco Aironet Access Points Command Injection Vulnerability (CVE-2016-1418)Cisco Aironet Access Points Command Injection Vulnerability (CVE-2016-1418) Release date:Updated on:Affected Systems: Cisco Aironet Access Point Software Release 8.2 (100.0)

A security story: Get the ROOT permission of the Belkin Wemo Switch There are many activities on SecTor 2015, among which my favorite is the Internet of Things Hack Lab initiated by Tripwire ). Internet of Things (IOT) is a physical device with

Chapter 6 security defense practices for iOS apps: files that cannot be destroyed Think of a common file system as a big notebook. When a file is deleted, many people think that this page is completely hacked with the trigger, just like the

Release date:Updated on: 2013-06-27 Affected Systems:Cisco Next-Generation FirewallDescription:--------------------------------------------------------------------------------CVE (CAN) ID: CVE-2013-3382 Cisco ASA Next-Generation Firewall is a

In the office, maybe you have just left your computer, and someone else starts to "peek" your computer. Although the Screen Saver with a password can avoid such security threats to a certain extent, the screen saver can be started only after a

With the popularization and importance of security education, especially the security education, anti-virus software and personal firewall are strictly required for personal computers. The virus library and system vulnerability patches are also

Investigate how CVE-2015-5477 & CloudFlare Virtual DNS protects its users Last week, ISC released a patch to fix a remote vulnerability in the BIND9 DNS server. This vulnerability causes the server to crash when processing a certain data packet.The

Security Science: What is a brute-force attack? How to detect and defend?   As we all know, the iCloud photo exposure door is actually not brilliant. Hackers continuously attempt to log on to the user's account name and password through brute force

  I have previously shared with you some personal views on the two cutting-edge technologies that may be used in the Intranet security field (sandbox that has not been widely used, and access control that has become more mature, today, I will

I. Basic Shell syntax1. VariablesBy convention, Shell variables are composed of uppercase letters and underscores (_). There are two types of Shell variables:Environment VariableEnvironment variables can be transmitted from the parent process to the

As we all know, SSH is a secure transmission protocol, which is used on many connected servers. However, in addition to this function, its tunnel forwarding function is even more attractive. The following are some of my experiences with your actual

The test server was not expected to be attacked, and no preventive measures were taken. The csf firewall is installed to handle a small number of ddos and cc attacks, which is quite useful. We have also used the TDS before. For details, refer to the

Javascript spyware script analysis: analysis and demonstration of Scanbox source code of Web malware This Scanbox malicious code is a Javascript malicious script with functions such as information collection and keylogging, and is suitable for IE

At present, there are tools on the market that can make the firewall more efficient and bring more benefits, Skybox and RedSeal are the leaders of these product manufacturers. Anyone who has run multiple firewalls in a complex enterprise environment

Computer security is especially important to every computer user. It is absolutely not so careless in choosing security software. Currently, all types of anti-virus software on the market are mixed, making it difficult for users to choose from. In

A reflective XSS and refer verification on Sina Weibo is lax (user login names and plaintext passwords can be intercepted, worms can be used, and followers can be refreshed) I originally wanted to find a CSRF. I found an XSS, and then I found a

Joomla CMS 3.2-3.4.4 SQL Injection Vulnerability Analysis Yesterday, Joomla CMS released the new version 3.4.5, which fixes a high-risk SQL injection vulnerability. Versions 3.2 to 3.4.4 are affected. Attackers can exploit this vulnerability to

Who is the best choice?Web application protection is undoubtedly a hot topic. Because of the maturity of technologies and the increasing expectation of convenience, Web applications have become the mainstream carrier of business systems. The data

SummaryThank you for your support. after hard work, the author has reached the third level, which is called "command execution ". I don't know whether the author's description is clear or the SAE's understanding is biased. We didn't directly

Recently, this is a very popular issue. Authentication phishing is caused by a problem of referencing network images. Currently, there is only one solution, that is, network images cannot be referenced, if you think of a better solution for