Cloud Security

Linux Kernel KVM 'kvm _ apic_has_events () 'Function Denial of Service VulnerabilityLinux Kernel KVM 'kvm _ apic_has_events () 'Function Denial of Service Vulnerability Release date:Updated on:Affected Systems: Linux kernel Description:

Linux Kernel 'fs _ pin. c' NULL pointer indirect reference Denial of Service VulnerabilityLinux Kernel 'fs _ pin. c' NULL pointer indirect reference Denial of Service Vulnerability Release date:Updated on:Affected Systems: Linux kernel

Hadoop, Hbase, and Zookeeper security practicesSpeaking of security, there are two main aspects: Authentication and Authorization:The Authentication task is to Authentication the user's identity, that is, you say that you are A user, and

PCRE Denial of Service Vulnerability (CVE-2015-2327) Release date:Updated on: Affected Systems:PCRE pcreDescription:CVE (CAN) ID: CVE-2015-2327 PCRE (Perl Compatible Regular Expressions) is a Perl library, including a perl-Compatible Regular

Security risks caused by improper authorization of FTP Server (Serv-U) accounts There are a lot of free FTP websites on the Internet that provide resource downloads. On the one hand, it facilitates our lives, and on the other hand, improper

Resolution of the latest SSL/TLS Vulnerabilities In March 2015, about 30% of network communication was protected by RC4. Through the attack, attackers can only use sniffing listening in a specific environment to restore plain text in encrypted

Python uses the scapy library for ARP Spoofing1. Description ARP spoofing, also known as ARP attack or ARP attack, is an attack technique against the Ethernet Address Resolution Protocol (ARP. This attack can allow attackers to obtain packets or

Large-volume DDoS attack protection solution With the increase in Internet bandwidth, DDoS attack traffic is growing, and more than Gbit/s of traffic-type attacks have become popular. For such large attack traffic, attacked customers often cannot

Hackers use PDF generators to steal files on WEB Servers Tcpdf pdf builder is one of the most popular PHP libraries used to create PDF documents and one of the most popular open source projects today. It has millions of users every day, and its

How to detect Mac infection with Flashback Trojans MAC computers have no viruses, and many MAC users are proud of them. However, with the increase of MAC users, some MAC viruses have started to emerge and infected many MAC computers. The Flashback

A system of xinnet may leak a large amount of sensitive domain name information, such as a business license. A weak password in a website of xinnet can leak a large amount of sensitive information such as domain names. This website is displayed when

Share a CSRF worm in a Sina community caused by jsonp hijacking Recently, jsonp has been very popular. To be honest, it has been ruined, but it has never been paid much attention by everyone. Just last month, I dug a CSRF IN A SINA community caused

If MOOC is improperly set, any user password can be reset. Research on Password Reset Vulnerability of any user indicates Resetting Password post content active is mailbox +, + the timestamp linkid is six digits, these six digits are the first

PHP automated white-box audit technology and implementation (1) 0x00 Preface There are only a small number of open PHP automated auditing technical materials in China. In contrast, there have been excellent automated auditing implementations in

How can I access a background of the 17WO website and win the Intranet server? Coincidentally, you sent me a text message to the server. At first, a text message flew over.  Mm ~ Access. The Struts2 vulnerability exists at a glance, but it is a

PHPWIND8.7 how to prevent CSRF vulnerability in mobile browser ModeCSRF is no stranger to old webmasters, but it is very unfamiliar to new webmasters. Today, we are talking about CSRF vulnerabilities like webmasters, CSRF is common in the use of

What is SQL injection attacks in an easy way (Episode 1) Let's take a look at what SQL is summarized by blame shu:   Are you talking about SQL or goddess? I cannot tell you clearly. Although basic things are boring, they are very important. So

Wpa_supplicant P2P SSID Management Vulnerability (CVE-2015-1863) Affected Systems: Android 5.x Android 4.x Android wpa_supplicant 1.0-2.4 Description: CVE (CAN) ID: CVE-2015-1863Wpa_supplicant is a Wi-Fi function component of Android

A sub-station XSS of Baidu can get BDUSSIs there a BDUSS http://zhidao.baidu.com/liuyan/detail in the truth Q & A machine? Id = 5809 now there is a lack of XSS that Baidu Knows, o -- o! I read the comments and loaded them in JSON format. The

Allows you to change the password of another user by bypassing the function permissions of the cloud Communications Administration APP. Attackers can change the password to reset others' accounts. Change the phone number to another user's mobile