Cloud Security

The OpenSSH bug exposes the system to brute force cracking attacks. OpenSSH is widely used to remotely access computers and servers. Usually, OpenSSH allows three or six logon attempts before closing the connection. However, Kingsley, a security

Cisco IOS Software DoS Vulnerability (CVE-2015-4199)Cisco IOS Software DoS Vulnerability (CVE-2015-4199) Release date:Updated on:Affected Systems: Cisco IOS 15.3 S Description: Bugtraq id: 75335CVE (CAN) ID: CVE-2015-4199Cisco IOS is an

Symantec DLP Cross-Site Request Forgery Vulnerability (CVE-2015-1485)Symantec DLP Cross-Site Request Forgery Vulnerability (CVE-2015-1485) Release date:Updated on:Affected Systems: Symantec Data Loss Prevention Description: Bugtraq id: 75289CVE

Rockwell Automation RSView32 information leakage (CVE-2015-1010)Rockwell Automation RSView32 information leakage (CVE-2015-1010) Release date:Updated on:Affected Systems: Rockwell Automation RSView32 Description: CVE (CAN) ID:

Cambridge University researcher found multiple Android devices have vulnerability in restoring original factory settings I thought that your Android device can be sold with "Restore original factory settings" without any worry. That's wrong.

Linux kernel Btrfs Privilege Escalation Vulnerability (CVE-2014-9710)Linux kernel Btrfs Privilege Escalation Vulnerability (CVE-2014-9710) Release date:Updated on:Affected Systems: Linux kernel Description: CVE (CAN) ID: CVE-2014-9710Linux Kernel

MIT Kerberos 5 requires_preauth Bypass Vulnerability (CVE-2015-2694)MIT Kerberos 5 requires_preauth Bypass Vulnerability (CVE-2015-2694) Release date:Updated on:Affected Systems: MIT Kerberos 5 MIT Kerberos 5 1.12.x Description: CVE (CAN) ID:

Security Science: common methods of LAN attacks Disclaimer: This site provides security tools and procedures (methods) that may be offensive and only for security research and teaching. You are at your own risk! When talking about network attacks,

Centos Denyhosts one-click installation and configuration script Centos Denyhosts one-click installation and configuration script Install the denyhosts script with one click and configure it as a common configuration. Brute force cracking of Linux

How to quickly discover Windows viruses without external tools     After several years of emergency response work, I think it is very useful to summarize a "methodology" to quickly determine whether a computer is infected with Trojans and viruses.

Reverse basic Finding important/interesting stuff in the code (1) V. Search for interesting or important parts of the Code In modern software design, minimalism is not particularly important. It is not because programmers write a lot of code, but

How to securely store passwords?Use bcrypt Use bcrypt, use bcrypt, and use bcrypt (more than once )......Why does not {MD5, SHA1, SHA256, SHA512, SHA-3 and other encryption algorithms }? These are all common hash functions. The original intention is

Firefox bookmarks extended application Pocket: vulnerability mining is not that difficult Pocket application developers recently fixed several data leakage vulnerabilities. Hackers can obtain WEB services, internal IP addresses, and more sensitive

Nodeclub injection vulnerability allows you to reset your password This nodeclub (https://github.com/cnodejs/nodeclub/) may be used by a small number of people, get to play to download the nodeclub source code from github. \ Controllers \ sign.

Reset any User Password Www.wang.com, formerly known as www.51ili.com, is a publicity media, a marketing consultant, and a sales channel for sellers. Through the Internet, merchants can make the most effective product promotion for Accurate target

SQL Injection exists in a Lenovo site http://rel.lenovo.com.cn/zhaoyang/gmyx.html POST injection: POST/zhaoyang/edm/add. php HTTP/1.1 Host: rel.lenovo.com.cnUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:32.0) Gecko/20100101 Firefox/32.0Accept:

A serious logical vulnerability in a home hotel allows users to log on to any account, resulting in tens of millions of sensitive information leaks (involving basic personal information and Check-in records of any user account, etc) The book said

ThinkSNS defense bypass ideas (union select truly unrestricted SQL injection) ThinkSNS defense bypass 2 I have worked very hard on this code: Public function PostFeed () {// returned data format $ return = array ('status' => 1, 'data' => ''); // The

Website vulnerability troubleshooting experience Here we will share some problems that have been detected during Vulnerability Detection on a website Member/user system (generally, all domain names are passport.xx.com). Most of these problems are

Apache HBase Information Leakage Vulnerability Apache HBase suffers problems due to remote denial of service, information leakage vulnerability, and information integrity. Affected Versions: HBase 0.98.0-0.98.12 HBase 1.0.0-1.0.1 HBase 1.1.0