Cloud Security

Oracle Database local vulnerability (CVE-2015-4753)Oracle Database local vulnerability (CVE-2015-4753) Release date:Updated on:Affected Systems: Oracle Database 12.1.0.2Oracle Database 12.1.0.1Oracle Database 11.2.0.4Oracle Database 11.2.0.3

Php OS Command Injection VulnerabilityPhp OS Command Injection Vulnerability Release date:Updated on:Affected Systems: PHP Description: Bugtraq id: 75290CVE (CAN) ID: CVE-2015-4642PHP is a widely used scripting language. It is especially

Multiple IBM product Denial of Service Vulnerabilities (CVE-2014-8926)Multiple IBM product Denial of Service Vulnerabilities (CVE-2014-8926) Release date:Updated on:Affected Systems: IBM License Metric Tool 9IBM License Metric Tool 7.5IBM License

WordPress Community Events plug-in multiple SQL Injection Vulnerabilities (CVE-2015-3313)WordPress Community Events plug-in multiple SQL Injection Vulnerabilities (CVE-2015-3313) Release date:Updated on:Affected Systems: WordPress Community Events

GNU Libtasn1 'decoding. c' Heap Buffer Overflow VulnerabilityGNU Libtasn1 'decoding. c' Heap Buffer Overflow Vulnerability Release date:Updated on:Affected Systems: GNU Libtasn1 Unaffected system: GNU Libtasn1 Description: Bugtraq id:

Five points about database securityFor telecom enterprises, database security is crucial. Imagine what will happen to the Recharge System? What will happen to system problems when mobile phone users query bills at the end of the month? The following

Apache Batik Information Leakage Vulnerability (CVE-2015-0250) Release date:Updated on: Affected Systems:Apache Group Batik Description:CVE (CAN) ID: CVE-2015-0250 Batik is a Java-based application toolkit that uses the SVG format for multiple

Hospira MedNet password leakage Vulnerability (CVE-2014-5400) Release date:Updated on: Affected Systems:Hospira MedNet Description:CVE (CAN) ID: CVE-2014-5400 MedNet manages the Drug Library, firmware updates, and configurations of the Hospira

Learning Android Application Security Testing from scratch (Part2)In the previous article, we set up a mobile penetration platform for Android applications. So far, you need to ensure that you have configured your virtual device, installed the

Alictf linux exploit Solution 1. Load modulesSudo insmod moduledmesg can see the hook. It is suggested that the module hijacked the system call, or the system call may be added.Then I wrote a program to traverse the system call, confirmed that no

Seven reasons for blacklisting you Common sense tells us that users are the weakest link in IT risk management, especially for "naive and brave" users ...... But how did hackers use this naive (lack of protection awareness) to access user terminals

Centos Denyhosts one-click installation and configuration script Centos Denyhosts one-click installation and configuration script Install the denyhosts script with one click and configure it as a common configuration. Brute force cracking of Linux

Principles and handling of SYN attacks against CentOS Security TCP has been developed for more than 30 years since it was invented in 1974 and has become the most important basic Internet Protocol. However, TCP also has some defects. SYN attacks use

Eight security settings for Apache Web Server Security in CentOS Apache server is an open-source WEB Server supported by the Apache Software Foundation, a non-profit organization. Many of our virtual hosts and VPS use the Apache server architecture

Ele. Me mobile phone verification can be used as phone bombing (killing you) Now, the food on campus is filled with little brother and sister who often send takeaways. I can't resist the temptation to start using ELE. Me, too, but what makes me

HTML5 Security Analysis: Local Storage In the previous article HTML5 cross-origin message sending security analysis, we discussed cross-origin message transmission in html5. This article will show you another feature-local storage. Local

Manual SQL Injection Entry If you have never tried SQL injection before, remove the check box before IE menu> Tools> Internet Options> advanced => show friendly HTTP Error messages. Otherwise, no matter what error is returned by the server, IE Only

Kaiyuan travel channel design defect causes reset of User Password If the previous vulnerability passes, it would be easier to reset the password. The design defect of the website is that the password reset link is a fixed value, no matter how many

Web security engineer-growth record Environment: dvwa1.7 Database: mysql knowledge: SQL statement (Click me) before SQL injection, we are familiar with select statements. 1. Open our SQL Terminal2. After Entering mysql, we can see that we have

Baidu consortium code defects cause dom xss to exist for websites promoted by Baidu (in Tianya, 58 cities, and Ganji as an example) The http://cpro.baidustatic.com/cpro/ui/c.js file is called with the following code: Y && Y("union/common/logic", [],