Cloud Security

The OpenSSH bug exposes the system to brute force cracking attacks. OpenSSH is widely used to remotely access computers and servers. Usually, OpenSSH allows three or six logon attempts before closing the connection. However, Kingsley, a security

Rockwell Automation RSView32 information leakage (CVE-2015-1010)Rockwell Automation RSView32 information leakage (CVE-2015-1010) Release date:Updated on:Affected Systems: Rockwell Automation RSView32 Description: CVE (CAN) ID:

Linux Kernel 'tty/tty_ldsem.c' Local Race Condition VulnerabilityLinux Kernel 'tty/tty_ldsem.c' Local Race Condition Vulnerability Release date:Updated on:Affected Systems: Linux kernel Description: Bugtraq id: 74820Linux Kernel is the Kernel

Cambridge University researcher found multiple Android devices have vulnerability in restoring original factory settings I thought that your Android device can be sold with "Restore original factory settings" without any worry. That's wrong.

MIT Kerberos 5 requires_preauth Bypass Vulnerability (CVE-2015-2694)MIT Kerberos 5 requires_preauth Bypass Vulnerability (CVE-2015-2694) Release date:Updated on:Affected Systems: MIT Kerberos 5 MIT Kerberos 5 1.12.x Description: CVE (CAN) ID:

How to securely store passwords?Use bcrypt Use bcrypt, use bcrypt, and use bcrypt (more than once )......Why does not {MD5, SHA1, SHA256, SHA512, SHA-3 and other encryption algorithms }? These are all common hash functions. The original intention is

How can we distinguish and use encryption and authentication technologies correctly? (1) Among cryptography experts, "encryption is not authentication" is a simple consensus. However, many developers who do not understand cryptography do not know

MySQL INJECTION SKILLS 0x00, Introduction You can also refer to the mysql injection Popular Science: http://drops.wooyun.org/tips/123 Many things are the same, but some tips are really useful. All of the following tips apply only to mysql, because

Reset any User Password Www.wang.com, formerly known as www.51ili.com, is a publicity media, a marketing consultant, and a sales channel for sellers. Through the Internet, merchants can make the most effective product promotion for Accurate target

A large browser game SQL injection has penetrated into the company to obtain a large amount of data. Later I learned that it was a very large development company, covering Web games, websites, and smart home. It has penetrated into the development

Severe logical vulnerabilities in p2p financial security Kingletter Network (http://www.jinxin99.cn) in the p2p financial industry seems to be the top 50, password retrieval function has design defects, resulting in the reset of any user password. 1

SQL Injection exists in a Lenovo site http://rel.lenovo.com.cn/zhaoyang/gmyx.html POST injection: POST/zhaoyang/edm/add. php HTTP/1.1 Host: rel.lenovo.com.cnUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:32.0) Gecko/20100101 Firefox/32.0Accept:

Yilong loan User Password Change Vulnerability (logical vulnerability not cracked) On the official website of Yilong loan, there is a random user password change vulnerability when retrieving the password. Step 1: retrieve the password, click

Superstar education's SQL Injection across multiple databases to leak a large amount of data Avengers 2 tells a story about how a local programmer who is overconfident and writes a bug program to work overtime to fix the vulnerability. Also known as:

ThinkSNS defense bypass ideas (union select truly unrestricted SQL injection) ThinkSNS defense bypass 2 I have worked very hard on this code: Public function PostFeed () {// returned data format $ return = array ('status' => 1, 'data' => ''); // The

XSS vulnerability of one cross-origin request continued As mentioned above, because you need to use the proxy page to solve the cross-origin request of POST requests, You need to execute the passed function on the proxy page. Therefore, we

Website vulnerability troubleshooting experience Here we will share some problems that have been detected during Vulnerability Detection on a website Member/user system (generally, all domain names are passport.xx.com). Most of these problems are

A library hit by an interface of Tuba Rabbit's installation and repair network exposes User Login creden( (with account creden) User Logon creden are disclosed when an interface hits a database (with account creden) The mobile login interface does

Baidu second-level domain name root permission Injection Vulnerability Https://jpaas-edu.baidu.com/the place where the invitation code is entered for this site is injected. Although there is a verification code, the verification code is not

Using FLASH to access the network causes XSS, CSRF, etc. Server crossdomain. the only cross-origin restriction policy for xml file flash is crossdomain. xml file, so we have to explain crossdomain. what is xml. when the file is located, SWF first