Cloud Security

Process and conclusion of CVE-2014-4423 Analysis Introduction Some time ago, "steamed rice" published an article on its blog "phishing attack (stealing the App Store password) on a non-jailbreaking iPhone 6 (iOS 8.1.3 )", try to reproduce the entire

Check whether your system has the "Shellshock" vulnerability and fix it. It quickly shows you how to check whether your system is affected by Shellshock, and, if so, how to fix your system from being exploited by Bash vulnerabilities. If you are

Cisco ios xe Software SNMP request Processing Denial of Service Vulnerability Release date:Updated on: Affected Systems:Cisco ios xe 3.9.xDescription:--------------------------------------------------------------------------------Bugtraq id:

Arbitrary File Upload Vulnerability (CVE-2014-5006) for multiple ManageEngine Products) Release date:Updated on: 2014-09-03 Affected Systems:ManageEngine implements topcentral 8-9 build 90054Description:-----------------------------------------------

WebKit Memory Corruption Vulnerability (CVE-2014-1340) Release date:Updated on: 2014-07-01 Affected Systems:Apple SafariWebKit Open Source Project WebKit 2WebKit Open Source Project WebKit 1.2.5WebKit Open Source Project WebKit 1.2.3WebKit Open

Difficulties and Countermeasures for network security management of confidential organizations Currently, the internal network security status of the security-related units of science and technology information is generally divided into two parts:

This vulnerability is not considered a vulnerability. However, the impact scope is extremely great. Currently, CDN, such as jiasule, website guard, Baidu cloud acceleration, and quickshield, are playing a great role ~, Various anti-DDOS and CC

SELinux Security System Basics in CentOS This article will record some experiences and experiences of learning SELinux... 1. Introduction to SELinux SELinux (Secure Enhanced Linux) Security Enhancement Linux is a new Linux security policy mechanism

Automatically compare and delete scripts after backing up Files Recently, the company is working on a data backup plan, so I have compiled two backup documents, "scp automatic copy script" and "rsync + inotify for real-time file synchronization

Port Security Scan script I have been working for half a year on part-time security. I would like to share with you how I am doing security here. Of course, as a part-time employee, I am not very thorough and I am not a reference for attacking. The

Virus Trojan scan: Reverse Analysis of pandatv (I)1. Preface conduct Reverse Analysis on viruses to thoroughly identify the behavior of viruses and take more effective measures. In order to save space, I am not going to thoroughly analyze the

"Pdf file": Trojan Horse also uses cloud Technology Recently, when downloading a PDF file, we found a simple malicious Downloader (a virus type ). Unlike other malicious loaders, this malware adds PE Loader to its binary.Is the zombie online? Once

How to apply the authentication module and. htaccess file to ensure Web Security To restrict access to a webpage, you can use the Authentication Modules and methods provided by Apache and a third party to verify the user's creden (such as the user

12306 the latest verification code can be cracked (it can be applied to the ticket grabbing software) Is this not reported ...... This wonderful verification code can be recognized by a public service for a long time ...... (The Verification Code

Phoenix vulnerability Group (resolution vulnerability, SQL injection, source code leakage, external database connection) Several vulnerabilities0x00 nginx resolution

WordPress image plug-in Fancybox-For-WordPress vulnerability causes batch Trojans Fancybox For WordPress is a great WordPress image plug-in that can bring up a beautiful browsing interface For your WordPress image to show a wide variety of pop-up

WebView cross-source attack analysis Same-origin policy The same-origin policy is one of the most important security mechanisms of browsers. It was first proposed by Netscape in 1995 and is followed by mainstream browsers. The same source usually

Web security practices (9) attack apache The vulnerabilities provided this time have been accumulated at ordinary times, but I have only a few actual vulnerabilities, with limited time and energy. I hope you can provide and discuss more technical

Extremely dangerous and common website security vulnerabilities and Solutions Recently, I handled two security vulnerabilities in the company's Internet project, which are common and dangerous. I. reflected Cross-Site Scripting

Login box of the strong intelligence educational administration system SQL Injection File: \ logs GL \ logincheck. asp\ Shortxs \ LoginCheck. asp\ Login admin \ LoginCheck. asp  Multiple login boxes are injected. Here I only paste the code of the