Cloud Security

Cisco IOS Software UBR Devices SNMP subsystem Denial of Service VulnerabilityCisco IOS Software UBR Devices SNMP subsystem Denial of Service Vulnerability Release date:Updated on:Affected Systems: Cisco IOS Description: CVE (CAN) ID: CVE-2015-4

MIT krb5 Denial of Service Vulnerability (CVE-2014-5355)MIT krb5 Denial of Service Vulnerability (CVE-2014-5355) Release date:Updated on:Affected Systems: MIT Kerberos 5 Description: CVE (CAN) ID: CVE-2014-5355Kerberos is a widely used

OpenSSL PKCS7_dataDecode Function Denial of Service Vulnerability (CVE-2015-1790)OpenSSL PKCS7_dataDecode Function Denial of Service Vulnerability (CVE-2015-1790) Release date:Updated on:Affected Systems: OpenSSL Project OpenSSL 〈 0.9.8zgOpenSSL

Master showdown-story about hacking of blog servers Every hero needs to confront the wall on the road to growth. either you succeed, stand on the top of the world, and gain top-level knowledge; or be beaten down by it to become one of all beings,

Simatic tia Portal Denial of Service Vulnerability (CVE-2015-2822)Simatic tia Portal Denial of Service Vulnerability (CVE-2015-2822) Release date:Updated on:Affected Systems: Siemens SIMATIC WinCC (TIA Portal) Description: CVE (CAN) ID: CVE-20

HP Multiple Remote Code Execution Vulnerabilities (CVE-2015-2113)HP Multiple Remote Code Execution Vulnerabilities (CVE-2015-2113) Release date:Updated on:Affected Systems: HP Thin Client t820 Flexible Thin ClientHP Thin Client t620 Flexible Thin

Processing experience after the server is hackedNot long ago, I read a hacker story (Master vs. blog server hacked). After reading this article, I realized that my machine is in a streaking state, then I checked the log on the server with great

Resin-startup script httpd. sh AnalysisAfter analyzing the tomcat startup scripts, we found that catalina. THE sh script has a problem in stopping, but the author has never found that the service cannot be stopped when using resin in the production

D-Link DSL-2740R Web Interface Remote Poisoning Vulnerability Release date:Updated on: Affected Systems:D-Link DSL-2740RDescription:Bugtraq id: 72339 The DSL-2740R is a wireless N300 ADSL2 + wireless router. D-Link DSL-2740R in the

Apt attacks against Israel and Palestine This short report introduces a series of attacks against Israel and Palestine. It uses malicious files as the source of communication for a large number of influential or politically relevant organizations.

FastNetMon, an efficient DDoS attack detection and analysis tool FastNetMon is an efficient analysis tool for DoS/DDoS attacks based on multiple packet capture engines (NetFlow, IPFIX, sFLOW, netmap, PF_RING, and PCAP). It can detect and analyze

Use john to crack the CentOS Password John is a Linux password cracking tool that can crack the shadow password of a Linux system. Official station: http://www.openwall.com/john/ Installation and use: 1234567 # wget

Simple Security Configuration for CentOS 6 servers Linux is an open system that allows you to find many ready-made programs and tools on the network. This facilitates both users and hackers, because they can also easily find programs and tools to

Diffie-Hellman Key Exchange is a popular encryption algorithm. The disclosed information about the Logjam Vulnerability (a variant of the FREAK vulnerability) has been sent to the browser manufacturer. The administrators of large websites are busy

Video website security-first video a platform has high-risk logic design defects (directly affecting more than 200 million players) Penetration falls in love with auditingHigh-risk logic design defects, tearing back the background ~  Http://tg.g.v1

How do I obtain the email address and phone number of all TCL employees (with a verification script) Unauthorized access to a system query interface ~   #!/usr/bin/env python# coding: utf-8 # pip install requests requests_ntlmimport requestsimport

Cross-Site Request Forgery (CSRF) due to multiple functional design defects in the entire site of huaban network (the private message function can be used to affect registered users of the whole site) Multiple Functional design defects in the entire

XML security you don't know0x00 XML Introduction XML eXtensible Markup Language, designed for data transmission and storage. Its diverse forms For example: 1. document Format (OOXML, ODF, PDF, RSS, docx ...) 2. image Format (SVG, EXIF Headers ,...)

EYou email system email body storage type XSS2 (with eYouXSS impact proof attached) New things affect Chrome. During the XSS test, a serious HttpOnly COOKIE leakage was found, which allowed the email body-type XSS to obtain all the cookies of users

One email can control the future emails of China Telecom users' mailboxes (or even change the email name to be more concealed) One email can control the future emails of 21cn user mailboxes for personal mailboxes. Here, a 21CN enterprise mailbox is