Cloud Security

Self-built CDN defense against DDoS (2): architecture design, cost and deployment details In the first article in this series, we introduced the situation of DDoS attacks on our customer service system and the reasons why we decided to use

Construct a BER file without a public key to cause the system to crash. In January 25, 2016, Wade Mealing sent an email to the OSS Security and CVE certification departments. The electronic topic is: constructing a special key file to cause DoS on

Oracle MySQL Server DoS Vulnerability (CVE-2016-0616)Oracle MySQL Server DoS Vulnerability (CVE-2016-0616) Release date:Updated on:Affected Systems: Oracle MySQL Server Description: CVE (CAN) ID: CVE-2016-0616Oracle MySQL Server is a

WormHole vulnerability: Remote Installation of malicious code on Huawei mobile phones Refresh the score, and submit it to the conscientious manufacturer. A strange thing was found during the WormHole Vulnerability Detection on the cellular network. 

How to Use Metabrik to automate malware Analysis In this article, we will show you how to use Metabrik to automate malware analysis, so that you can run malicious programs on virtual machines after creating a snapshot of the Windows system. In this

Comcast Xfinity family security system exposed to severe vulnerabilities Recently, researchers found that a security vulnerability exists in the Comcast Xfinity home security system. Attackers can access the user's home without triggering an

Click my link to access your zhihu account. Click my link to access your zhihu account. Zhihu's Weibo login Binding Request is  Http://www.zhihu.com/oauth/redirect/bind/sina? Next =/oauth/callback this request is not protected by csrf. Attackers

Unauthorized access to a Huawei system may cause information leakage. Getshell/root permission may affect Intranet security. Rt Http: // MAID: 8080/imeeting_webinar_web/  Http: // MAID: 8080/dmp_sys_web/  Http: // 183.131.151.13: Port 8088/8088

Package A system vulnerability in huatai insurance (unauthorized access \ weak password \ Getshell) Package system vulnerabilities and obtain the Home Page Http: // 219.141.242.77: 7777/pe-admin/  1 # unauthorized access to the backgroundHttp: // 21

A third-party website causes cookie leakage of an Official Administrator of wooyun Strange posture, Please Ray. Today, I finally configured Daniel @ Matt's GourdScan.So I came up with a question:Http://www.gufensoso.com/search? Q = intitle % 3A % 22

A substation in Xunlei has leaked the whole site source code and is in the management background. Would you love me if I was a quickplay? Would you love me? aplayer.open.xunlei.com/ The ip address of the query server is 123.162.191.120.Ftp: // 123.16

Angler Exploit Kit phishing Kit has infected more than 90,000 websites Recently, analysis reports from Palo Alto Networks show that the continuous infection of Angler Exploit Kit has resulted in more than 90000 websites being cracked, and most

An SQL injection vulnerability exists in a site of xiaguo Network (involving 32 databases) An SQL injection vulnerability exists in a site of xiaguo network. Http://m2.xianguo.com/homeindex/list? Cid = 1 & tagid = 100_33 injection point: cidsqlmap

Wukong CRM system backdoor causes unauthorized access to company files This may be the debugging interface used for testing. As a result, you can view the internal files uploaded by the company's CRM without having to log on. The installation

The official APP of xiaguo network has SQL injection (Cross 32 databases/including a large number of user libraries) SQL Injection for APP security Objective: To view the official APP of xiaguo NetworkSQL Injection exists in the following areas:

A certain part of wasu data leakage can connect to the database RT Https://github.com/fucifer/learn/blob/07f3ddd8bf3568d1033cf040792912b9e0023a34/dphd/src/main/resources/env/config.propertiesLeakage of database addresses and passwords    The

Destoon full-version waf Bypass Vulnerability Solution Strip_ SQL is the main security defense function of destoon. It mainly defends against injection vulnerabilities in most cases. This function can be bypassed. The injection vulnerability may

Wasu sub-station Multiple SQL injection to easily obtain webshell (system

Another stored xss vulnerability in xueqiu.com You have compared the previous vulnerabilities and confirmed they are not repeated. This problem occurs when you upload a PDF file and describe it.The problem is a bit strange, but it is indeed a

602 Gbps: attacks against the BBC have become the strongest DDoS attacks in history New World Hacking, the hacker organization responsible for the BBC attack, said that the intensity of DDoS attacks against the BBC has reached 602 GBps, which will