IIS4 \ IIS5 CGI Environment block forgery 0 day

It was found about 14 years ago that the current 0-day vulnerability was IIS4 \ IIS5. The corresponding operating systems were winnt and win2000. Microsoft no longer supported these software and their strategies wanted to eliminate these systems,

Then attackers can bypass Baidu antivirus Code Execution (POC)

If there is a problem, don't worry about it. If the vendor who ignores my problem secretly fills up the vulnerability, don't install it all day long. you should know all the bugs you mentioned, and there is no major harm to those you shouldn't know.

10 Nginx security tips

Nginx is one of the most popular Web servers today. It provides services for 7% of the world's web traffic and is growing at an astonishing rate. It is an amazing server. I am willing to deploy it.The following is a list of common security traps and

Shell sharing of ftp backup server data integrity check and SMS warning

This script checks the data integrity of remote backup to the ftp server and whether ftp is sent to the server, if the ftp server is not backed up in time, the script will trigger the SMS alarm function module to generate an SMS alarm. Finally, due

Principles and basic configurations of cisco ASA firewall security algorithms (I)

I. security algorithms of ASA 1) ASA is a stateful firewall with a connection table about user information, called the conn table. The key information in the table is as follows: Source IP Address Destination IP address The IP Protocol only applies

How to buy a hardware firewall

Last year, I needed a hardware firewall. I tested three hardware firewalls with routing functions, there is Sangfor, hillstone, And a brand that won't be mentioned because of problems. Every firewall has been tested for one month. I have found some

Linux DHCP server configuration (1)

DHCP Overview1. necessity of using DHCPIn TCP/IP networks, before each workstation can access resources on the network, basic network configurations must be performed. Some main parameters, such as IP addresses, subnet masks, and default gateways,

(Arm entry) disassembly Analysis of the life and death causes of an arm function call

Arm does not have a wide array of x86 materials, but it cannot be used at the underlying Android layer. As a beginner, I have taken a lot of detours. Now I use a practical example to analyze the simplest arm function call process, hoping to help you,

Introduction to PKI (6)

PKI core-Certification Center CA) Introduction To ensure the transmission security of online digital information, in addition to using stronger encryption algorithms and other measures in communication transmission, a trust and trust verification

Interpreting the misunderstanding of data leakage Protection Technology

The expert group at the RSA meeting pointed out that the deployment of data leakage protection technology has been suspended for many enterprises due to misleading information and incorrect publicity on data leakage protection, they missed the

What is a digital signature? (1)

1. Bob has two keys: one is the public key and the other is the private key. 2. Bob sent the public key to his friends, who are Parti, Doug, and Susan. 3. Susan wants to write a confidential letter to Bob. After writing it, She encrypted

Do not let down trust how to make Password Storage secure

As software developers, one of the most important responsibilities is to protect users' personal information. If users have no technical knowledge, they have no choice but to trust us when using our services. Unfortunately, when we look into

Xss bypass waf note

Instance 1, WAF Filter: ”onmouseover”ByPass: %d  Instance 2, WAF detects alert, because many automatic detection tools use this statement to test XSS “ onmouseover=alert(‘XSS within input field’)orWAF keyword Filter:alert (some test tools use

Attackers can use SVG to bypass browser XSS auditing.

[Translated From]: http://insert-script.blogspot.com/2014/02/svg-fun-time-firefox-svg-vector.html================================== SVG- element ================ the element in SVG is used to reuse other elements, it is mainly used to connect and

Dahantong edition jis Uniform Identity Authentication System Vulnerability Packaging

The jis Uniform Identity Authentication System of Chinese pass edition: capture packets when the user modifies the information and find that POST: http: // 10.11.5.201: 9080/jis/front/upduser_do.jsp CONTENT: c_id = 00000 & vc_loginid = admin &

Change the password of any user for Car Rental in Shenzhou

The problem lies in the app end of car rental in China. The verification mechanism is designed to be too fragile ~ The following is the request packet for modifying the user's personal data. The verification part of the account and password in the

Sugon creates a three-dimensional security protection solution for Servers

With the development of Internet information technology, computers have been applied in all corners of the world. Many enterprises rely on IT technology to build their own information systems and business operation platforms, and provide services to

15 tips for protecting IIS Web servers

Generally, most Web sites are designed to provide visitors with instant information access in the most acceptable way. Over the past few years, more and more hackers, viruses, and worms have brought serious security problems that have severely

139 email worm compiling example

139 email worm compiling example Author: [sh0wrun], [woyigui] Date: 2009-09-09 Disclaimer: the vulnerability has been reported and repaired. Do not use it for illegal purposes. Principle Analysis: We often use mail.139.com, which is prone to xss

Solve the concerns of O & M personnel: what technical means are used to ensure website security? (1)

BKJIA recently held a "save website O & M Manager Zhao Ming" activity. The main line is that an O & M personnel is criticized by the leaders because the website is hacked. The majority of users offer suggestions and provide protection advice.

Total Pages: 1330 1 .... 303 304 305 306 307 .... 1330 Go to: GO

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.