Cloud Security

Attackers can bypass the protection caused by the misuse of ELE. Me cryptography. Talking about the android cryptography vulnerability. The misuse of cryptography is a big problem in apps. Almost all apk verification algorithms can be simulated. Ele.

Sybase Database Security IntroductionThe full name of Sybase is SAP Sybase Adaptive Server Enterprise (ASE or Sybase ASE for short). It inherits the original MSSQL Code and is closely related to MSSQL. Sybase is a relational database system. It is a

OpenSSH brute force cracking VulnerabilityOpenSSH brute force cracking Vulnerability Release date:Updated on:Affected Systems: OpenSSH Description: OpenSSH is a free open-source implementation of the SSH (Secure SHell) protocol. The SSH

Multiple Panda Security Products 'pskmad. sy' Heap Buffer Overflow VulnerabilityMultiple Panda Security Products 'pskmad. sy' Heap Buffer Overflow Vulnerability Release date:Updated on:Affected Systems: Panda Internet Security 2015 1.0.0.13Panda

Xen Stack Buffer Overflow Vulnerability (CVE-2015-3259)Xen Stack Buffer Overflow Vulnerability (CVE-2015-3259) Release date:Updated on:Affected Systems: XenSource Xen 4.1.x-4.5.x Description: Bugtraq id: 75573CVE (CAN) ID: CVE-2015-3259Xen is

Samsung Galaxy S5 remote code execution vulnerability in CVE-2015-4034)Samsung Galaxy S5 remote code execution vulnerability in CVE-2015-4034) Release date:Updated on:Affected Systems: Samsung Galaxy S5 Description: Bugtraq id: 75403CVE (CAN)

Samsung SBeam Information Leakage Vulnerability (CVE-2015-4033)Samsung SBeam Information Leakage Vulnerability (CVE-2015-4033) Release date:Updated on:Affected Systems: Samsung SBeam Description: Bugtraq id: 75404CVE (CAN) ID:

Adobe Flash Player and AIR Multiple Remote Denial of Service Vulnerabilities (APSB15-16)Adobe Flash Player and AIR Multiple Remote Denial of Service Vulnerabilities (APSB15-16) Release date:Updated on:Affected Systems: Adobe Flash Player Adobe Flash

PHP 'Incomplete _ class. c' Memory Corruption Vulnerability (CVE-2015-4602)PHP 'Incomplete _ class. c' Memory Corruption Vulnerability (CVE-2015-4602) Release date:Updated on:Affected Systems: PHP PHP PHP Description: Bugtraq id: 75249CVE

CentOS intrusion through log Lookup View log files Linux/var/log/wtmp file view suspicious IP Login Last-f/var/log/wtmp This log file permanently records the logon, logout, and system startup and shutdown events of each user. Therefore, as the

Quick access to basic Server Information shell scriptsSuccessively run shell scripts (applicable to centos and debian Series)Catcheck. sh #! /Bin/bash # ------------------------------------------------ # Date: June152015 # Author: jimmygong # Mail:

Hacker Team RCSAndroid Trojan   Android device caution: versions 4.0-4.3 can be handled by RCSAndroid. Remote Control Trojan RCSAndroid on Android is currently one of the most professional and complex malicious programs exposed in Android. Since

Solve the browser homepage hijacking event caused by the "" plug-in for installing youtubedownloader. Youtubedownloader is a tool used to download videos on the youtube site. It is very convenient to download videos by providing video URLs. However,

Discuz full-version storage XSS Analysis Discuz sets the post administrator's function to edit comments in the user comments. due to improper processing of the front-end JS Code, the maliciously constructed comments form an XSS after interaction.

Web security under NodeJs Web security is a topic that we must pay attention to and cannot escape. This article introduces various common Web attack techniques and solutions, especially for Node. security is even more important for js, a new

Python security coding and code Auditing 1 PrefaceCurrently, the general web development framework security has been quite good. For example, django is commonly used, but some nonstandard development methods will still cause some common security

Eight functions to enhance PHP program Security Security is an important aspect of programming. In any programming language, many functions or modules are provided to ensure program security. In modern website applications, users from all over the

Search for a substation full-site source code leakage (database information leakage) Http://ads.zhongsou.com/.svn/entries can use svn source code leakage tool to view the full site source code   Database Configuration File Location:  Database

Web SQL injection and packaging   Three injection packagesInjection Point 1: http://www.wepiao.com/?a=filmdetail&c=film&m=web&fid=5452 Fid ParameterInjection Point 2: http://www.wepiao.com/?a=cinemadetailshow&c=cinema&m=web&cinemaid=1002069 Cinemaid

Shanda's website source code leaks. Getshell goes directly to the Intranet. Git leaks, causing source code to be downloaded to the http://minigame.sdo.com/taojin/.git/config Here, we will not describe the specific vulnerability exploitation details