Cloud Security

Canonical releases Spectre/Meltdown patch for Ubuntu 17.10 and Raspberry Pi 2 Canonical released two security recommendations on Thursday, announcing Specter mitigation for the ARM64 (AArch64) hardware architecture on its Ubuntu 17.10 and Ubuntu 16.

Iis php fastcgi mode pathinfo value error Arbitrary Code Execution Vulnerability repair method, fastcgipathinfo Description: The target has the arbitrary code execution vulnerability. Cause of vulnerability: the default PHP configuration IS

Cisco WebEx Meetings Server Cross-Site Request Forgery (CVE-2016-1448)Cisco WebEx Meetings Server Cross-Site Request Forgery (CVE-2016-1448) Release date:Updated on:Affected Systems: Cisco WebEx Meeting Center 2.7 Description: CVE (CAN) ID:

Multiple Memory Corruption Vulnerabilities in Mozilla Firefox, ESR, and ThunderbirdMultiple Memory Corruption Vulnerabilities in Mozilla Firefox, ESR, and Thunderbird Release date:Updated on:Affected Systems: Mozilla Firefox Mozilla Thunderbird

IOS security analysis on the mobile cloud storage service platform (Parse) Parse: A cloud platform that provides background services for mobile appsParse is a cloud computing platform incubated by YC to provide background services for mobile

Android analysis caused by one app packet capture (continued)Cause 0x00 First of all, this article is not a continuation of the Orthodox "Android analysis record caused by an app packet capture", but the analysis of an APP is the same as the cause.

Release date:Updated on: 2013-02-19 Affected Systems:Cisco Linksys E1500 1.0.05-build 1Cisco Linksys E1500 1.0.04-build 2Cisco Linksys E1500 1.0.00-build 9Cisco Linksys E2500 1.0.03Description:---------------------------------------------------------

Start the SSL function of the Serv-u ftp Server Serv-u ftp Server is a widely used FTP Server software. It provides SSL functions but is not enabled by default. FTP transfers data in plaintext mode. To ensure data security, it is necessary to enable

The latest 0-day IE has affected Microsoft's entire system, and no patches are currently available. Microsoft recently released a security bulletin to guide you on how to temporarily block this vulnerability.The vulnerability lies in OLEDB32.dll. So

This article describes how to perform a basic security audit for an iOS application, mainly through manual audit of black box or gray box. Note that the red font is the checklist for security audit.1. IPA installation package analysis (Static

Analysis of Anti-virus detection and removal techniques of recent js scams Recently, many netizens have reported that hackers have been blackmailed (also known as the "Locky ransomware"), and files, images, and other important information on

Virus is detected, but it cannot be cleared in safe mode or in Windows. What should I do? Due to the particularity of some directories and files, there is no way to be clear directly, including some methods such as anti-virus in security mode, but

LIDS (Linux Intrusion Detection System) is a Linux kernel patch and system management employee lidsadm. It enhances the Linux kernel. It implements a security mode in the kernel-reference mode and the Mandatory Access Control command in the kernel

The huge market demand will inevitably lead to a large number of excellent products. The three well-known anti-virus security vendors rising, Kingsoft and Jiangmin are outstanding representatives of many anti-virus software products in China.

One of the things faced by many network engineers is the maintenance and update of SSL certificates. For the author, SSL certificates are mainly used for VPN deployment, but there are also many network devices that need certificates to encrypt

General USB flash drives do not provide encryption functions. Although the shape of USB flash drives is similar to that of dongles, they are completely different internally. USB flash drives are just a memory chip and a simple ancillary circuit,

Nmap memo form: From Discovery to vulnerability exploitation (Part 5)   This is the last part of the memo list. Here we will mainly discuss vulnerability assessment and penetration testing.Database Audit list database names   nmap -sV --script=mysql-

Bkjia.com exclusive Article] more and more users have their own personal websites, describe their lives on blogs, and communicate with friends on various forums, self-timer videos are published on video sharing websites-these users can add their own

Affected Versions:WordPress 2.8/WordPress MU 2.7.1Program introduction: WordPress is a free forum Blog system.Vulnerability Analysis: WordPress lacks permission check for the PHP module configured with the page parameter plug-in. If the

UsePHPConstructedWebHow can applications avoidXSSAttackThe development of Web 2.0 provides more opportunities for interactions between network users. Users may intentionally or unintentionally enter some destructive content by posting comments on a