Cloud Security

CVE-2014-0160 vulnerability background OpenSSL released a Security Bulletin on April 7, 2014, in OpenSSL1.0.1 there is a serious vulnerability (CVE-2014-0160 ). The OpenSSL Heartbleed module has a BUG. The problem lies in the heartbeat section in

It was found about 14 years ago that the current 0-day vulnerability was IIS4 \ IIS5. The corresponding operating systems were winnt and win2000. Microsoft no longer supported these software and their strategies wanted to eliminate these systems,

System Administrators using the complete vSphere solution use VMware HA to ensure the continuous running of virtual machines. However, if you are using the free version of ESXi, you will not be able to use the VMware HA feature. There are other

If there is a problem, don't worry about it. If the vendor who ignores my problem secretly fills up the vulnerability, don't install it all day long. you should know all the bugs you mentioned, and there is no major harm to those you shouldn't know.

BackgroundSometimes programmers need to write code independent of location operations, which can be written to other processes or networks as a piece of data. This type of code was called shellcode at the beginning of its birth. hackers in software

DoS attacks are an eternal problem. Although professional firewall and Server Load balancer gateway devices can effectively defend against DoS attacks, however, hackers prefer the combination of x86 + GNU/Linux for the simple reason: cheap enough.  

1. The parameters of the terminal configuration software (such as super terminal or secureCRT) are as follows: Speed: 9600bps Check bit: None Data bit: 8 Stop bit: 1 Traffic control: None 2. Restart the vro. Press Ctrl + Fn + Break during the

HTTPHeaderThe HTTP request contains many header information. obviously, you can control all the header information, but if you set the header value to something wrong, it is very likely that this request will be abolished, and the server will simply

The following script is powerful, make by xhchen, and add it to favorites. 1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192

Prevent them from cracking, let them disguise themselves, and let them think about it slowly! 1. Hide the php version number Hiding method: Add the following code to vimphp. ini: expose_php = Off 2. Hide the nginx version number Hiding method:

This article focuses on the definition of the cloud tailored from the unique perspective of IT networks and security professionals. A set of common and concise words for unified classification can be used to describe the impact of cloud architecture

Squid is a software used to cache Internet data. It receives user download requests and automatically processes the downloaded data. When a user wants to download a home page, he/she can send an application to Squid to download the page instead of

The zone-pair firewall divides the interface of the ios router into several regions, and the traffic between different regions cannot communicate. This is similar to the interface type of ASA! Pay attention to the following points: 1. confirm that

Among users who often use anti-virus software, "Slow anti-virus speed" is certainly a high incidence of questions. Too anxious! So why does it show "Slow anti-virus speed? The reason is similar to the following:There must be a large number of files

Oracle SecureFiles was introduced in Oracle 11g. It has some advantages that traditional large objects (which have been renamed BasicFile LOB) do not have. Oracle SecureFile LOB supports Smart Data Compression. It is a deduplication method that

. Net cross-site scripting (XSS) vulnerability SolutionDescription:1. Cross-Site Scripting refers to a malicious attacker inserting a piece of malicious code into the webpage. When a user browses the webpage, the malicious code embedded in the

I have introduced redis using zabbix to monitor fixed port 6379 (article address is http://dl528888.blog.51cto.com/2382721/1361407), there is a bad place that only monitoring fixed port 6379, if it is not port 6379, you need to modify the template.

Some design defects (weak verification) in Yisi ESPCMS can be logged on to any user account. Yisi ESPCMS cookie has design defects. I will check the ecisp_home_seccode ecisp_member_username ecisp_member_info parameter in the cookie. Function

[Translated From]: http://insert-script.blogspot.com/2014/02/svg-fun-time-firefox-svg-vector.html================================== SVG- element ================ the element in SVG is used to reuse other elements, it is mainly used to connect and

The jis Uniform Identity Authentication System of Chinese pass edition: capture packets when the user modifies the information and find that POST: http: // 10.11.5.201: 9080/jis/front/upduser_do.jsp CONTENT: c_id = 00000 & vc_loginid = admin &