Cloud Security

Threat from Killer Kernel configuration change-Swappiness We are under non-hacker attack. We use the Linux kernel version 3.5-rc1 and RedHat backport patch to deal with swappiness = 0. This is a real threat. One of our customers is affected and the

Read the IIS Password, and restore the IIS Password to the original When I was working on a project today, I used my iis. vbs to read the iis user list and password. Because sometimes the iis Password is the FTP Password Many of them are listed, but

OpenSSL no-ssl3 build option Security Bypass Vulnerability (CVE-2014-3568) Release date:Updated on: Affected Systems:OpenSSL Project OpenSSL Description:Bugtraq id: 70585CVE (CAN) ID: CVE-2014-3568 OpenSSL is an open-source SSL implementation

Xen vulnerability exposure (CVE2014-7188) Xen is one of the large-scale deployment virtualization solutions. This round of * EMBARGO * exposes a total of five vulnerabilities, the last of which was disclosed on the evening of January 1, October 1, 20

Malicious attack on IE browser using MS14-035 This vulnerability can cause the Internet Explorer to crash. The versions involved include ie8, 9, and 10. Microsoft released an update Patch on March 14, June 10,So now we can only attack ie browsers

Linux Kernel KVM Local Privilege Escalation Vulnerability Release date:Updated on: Affected Systems:Linux kernel Description:--------------------------------------------------------------------------------Bugtraq id: 64291CVE (CAN) ID: CVE-2013-6368

OpenSSL Remote Denial of Service Vulnerability (CVE-2014-3509) Release date:Updated on: Affected Systems:OpenSSL Project OpenSSL Description:--------------------------------------------------------------------------------Bugtraq id: 69084CVE (CAN)

OpenSSL SRP Remote Denial of Service Vulnerability (CVE-2014-3512) Release date:Updated on: Affected Systems:OpenSSL Project OpenSSL Description:--------------------------------------------------------------------------------Bugtraq id: 69083CVE

Request Tracker 'showpending' parameter SQL Injection Vulnerability Release date:Updated on: 2013-04-13 Affected Systems:Bestpractical RT 4.0.10Description:--------------------------------------------------------------------------------Bugtraq id: 59

Introduction to fail2ban anti-brute force cracking 0x00 Introduction Fail2ban can monitor your system logs, and then match the log error information (Regular Expression matching) to execute the corresponding shielding action (usually by calling the

How did I find a Cisco XSS vulnerability? I found an XSS cross-site scripting vulnerability in Cisco's IOS SoftwareChecker. The vulnerability itself is not complicated. I would like to share with you the entire process of discovering the

DESTOON foreground getshell   \ Module \ know \ answer. inc. php143-161 rows  Case 'raise ': // This function is used to update the number of rewards for "Know the function", because it is only allowed to increase the number of rewards twice by

Web security practices (8) attack iis6.0 Through the previous discussion, we have learned how to determine the type of web server. This section continues to discuss web platform vulnerability attacks. The defect mentioned here is the defect of the

KPPW open-source witch system bypass protection blind note KPPW open-source witch system bypass protection blind note  1.Kppw SQL InjectionThe vendor fixed the vulnerability. Union cannot be performed if union is replaced.However, you can perform

Discuz! HTTP host Header attacks in multiple versions Http://www.bkjia.com/Article/201404/292132.html Discuz! X3.2 is an example.Take http://bbs.locojoy.com/as an example, 1. its ip address is 115.29.162.113 2. Add entries to hosts 115.29.162.1

Xuehesi sensitive information leakage caused by an unfixed SQL injection vulnerability in a substation SQL injection vulnerability in a business This is an SQL injection vulnerability in the talent recruitment system. It is generally considered that

PHPMyWind Background Management Interface SQL Injection Vulnerability The SQL injection vulnerability is caused by poor filtering on the background management interface. administrators with lower permissions can obtain higher permissions and obtain

Winmail mail body storage type xss (with trigger conditions) A product with similar functional styles as QQ mail, but its security is worse than QQ mailSimply put, the text is processed, but the user does not properly process the response or

Implementation Principles of Huawei Easy IP and NAT ServerThis article continues to introduce the working principles of Huawei's two NAT implementation methods. 6.1.3 implementation principle of Easy IP The implementation principle of the Easy IP

TCP/IP status change diagram and TCP three-way handshake/Four WavesTCP/IP status change diagram:Detailed descriptions of each status:CLOSED: indicates the initial state. It is the same for both the server and the C client. LISTEN: indicates the