Cloud Security

CURL/libcURL 'fix _ hostname () 'Function Denial-of-Service Vulnerability (CVE-2015-3144)CURL/libcURL 'fix _ hostname () 'Function Denial-of-Service Vulnerability (CVE-2015-3144) Release date:Updated on:Affected Systems: CURL 7.37.0-7.41.0

PHP 'str _ repeat () 'Function Integer Overflow VulnerabilityPHP 'str _ repeat () 'Function Integer Overflow Vulnerability Release date:Updated on:Affected Systems: PHP 5.5.0-DEVPHP 5.4.3PHP 5.4.2PHP 5.4.1RC1-DEVPHP 5.4.1 Description: Bugtraq

Reuse Vulnerability after the FFmpeg ff_h1__free_tables function is releasedReuse Vulnerability after the FFmpeg ff_h1__free_tables function is released Release date:Updated on:Affected Systems: FFmpeg Description: CVE (CAN) ID:

In September 2014, Chrome became the most vulnerable program. A few days ago, secunia, a foreign security research company, published a 2014 program Security Vulnerability research report. According to the report, 3870 vulnerabilities were found in 1

Ntpd reference implementing Denial of Service Vulnerability (CVE-2015-1799) Ntpd reference implementing Denial of Service Vulnerability (CVE-2015-1799) Release date:Updated on: Affected Systems:NTP NTP 4.xNTP 3.xDescription:Network Time Protocol

Linux single-user password cracking Ubunt1. When the system is started to grub, use the up/down key to move to the recovery mode of the second line, and press e (note not to press Enter)That is, Ubutn, kernel 2.6.12-9-386 (recovery mode)2. Change ro

PostgreSQL Information Leakage Vulnerability (CVE-2014-8161) Release date:Updated on: Affected Systems:PostgreSQL 9.4PostgreSQL 9.1PostgreSQL 8.4Description:Bugtraq id: 72538CVE (CAN) ID: CVE-2014-8161 PostgreSQL is an advanced object-relational

After the MySQL database is attacked and tampered with, it uses backup and binlog for data recovery.This article mainly describes how MySQL is attacked and tampered with data, and uses slave database backup and Binlog of the master database for

Bash Vulnerability Detection Methods You can run the following command to check whether the system has this vulnerability (running in the local Bash environment ):Shell 1, CVE-2014-6271, Test method:Env x = '() {:;}; echo vulnerable' bash-c "echo

Shell script (strict terminal format control, beautiful output font color)[Cpp] view plaincopy #! /Bin/bash # # The following figure shows the font output color and terminal format control. # Font color 30-37 Echo-e "\ 033 [30 m black

Anti-Virus Defense Research: self-replication and self-DeletionI. PrefaceBased on Computer Security knowledge, the series of anti-virus attack and defense studies anti-virus Trojan technology by analyzing common techniques implemented by virus and

An example of webshell troubleshooting About the website, Linode Tokyo's high-end VPS, CentOS system, LNMP environment, and run Discuz X 2.5, with a high access volume.Start searching with the following command:Find.-name "*. php"-print0 | xargs-0

Reverse Renren client, cracking Verification Algorithm Reverse Renren client, cracking Verification Algorithm It was discovered many years ago. It was written to commemorate those days and to commemorate those who had been cracked by me ..... Log

SQL Injection Vulnerability exposure-entryWith the development of B/S application development, more and more programmers are writing applications using this mode. However, due to the low entry threshold in this industry, the programmer's level and

Train station ticketing terminal touch Sandbox Bypass (contains ID card authentication driver and ticket terminal program) Jinan Railway Station ticketing terminal touch Sandbox Bypass, long press flash picture will appear right-click menu. The

Murder Case 2 caused by Guangdong building Vulnerability (getshell information leakage of hundreds of users nationwide) You can upload any file in the background using getshell. Add a link to upload the problem file and upload a sentence directly. 

Newbie takes webshell for the first time and uses the bypass intrusion detection technology Of course, the target website for intrusion detection is owned by the Japanese Empire. Site: www.newtb.co.jp first found the injection point. I scanned the

MetInfo does not need to log on to the front-end to directly GETSHELL MetInfo does not need to log on to the front-end GETSHELLMetinfo is still doing a good job, but a small negligence, excessive authority leads to a large Vulnerability The Code is

A function of Renren community can cause worms (XSS filtering analysis and bypassing skills) In other words, the front-end filter is used at the beginning, and the script of any length can be uploaded after packet capture and modification. Therefore,

Baidu cloud CDN protection rules Bypass Baidu cloud accelerates waf rule Bypass 1: When dedecms features were created, the domain names were collected,Www.52jscn.com. This website is of the dedecms type. However, during the payload test, we found