Cloud Security

Cisco uniied Intelligence Center Cross-Site Request Forgery VulnerabilityCisco uniied Intelligence Center Cross-Site Request Forgery Vulnerability Release date:Updated on:Affected Systems: Cisco uniied Intelligence Center 10.6 (1) Description:

Polar bastion host common user command execution (root permission)Brief description: Polar internal control bastion hosts use advanced technologies to protect internal network devices and servers, and monitor and audit common access methods for

IBM DB2/DB2 Connect information leakage (CVE-2014-0919)IBM DB2/DB2 Connect information leakage (CVE-2014-0919) Release date:Updated on:Affected Systems: IBM DB2 Connect 9.xIBM DB2 Connect 10.xIBM DB2 9.xIBM DB2 10.x Description: CVE (CAN) ID:

Dnsmasq "setup_reply ()" DoS VulnerabilityDnsmasq "setup_reply ()" DoS Vulnerability Release date:Updated on:Affected Systems: Dnsmasq Description: CVE (CAN) ID: CVE-2015-3294Dnsmasq is a lightweight DNS forwarder and DHCP server.Dnsmasq has a

Quassel Remote Denial of Service Vulnerability (CVE-2015-2779)Quassel Remote Denial of Service Vulnerability (CVE-2015-2779) Release date:Updated on:Affected Systems: Quassel IRC Team Quassel 0.12-rc1 Description: Bugtraq id: 74048CVE (CAN) ID:

Oracle Java SE Remote Vulnerabilities (CVE-2015-0470)Oracle Java SE Remote Vulnerabilities (CVE-2015-0470) Release date:Updated on:Affected Systems: Oracle Java SE 8u40 Description: Bugtraq id: 74149CVE (CAN) ID: CVE-2015-0470Java SE is short

Online Banking security guards borrow game safes In the 360 security series software, there is a tool "360 game safe deposit box" that promotes and protects games. For those who do not play games, it is reasonable to say that this software is

Zero Access malware Analysis0x00 Preface Zero Access has infected hundreds of millions of computers around the world so far. Well, ZA (Zero Access) I think one of the reasons is that malicious ad clicks and Bitcoin mining are rampant. Once the ZA

Chaotic Digital Image Encryption Algorithm (1) Abstract: At present, the combination of Chaotic Systems and encryption technology is currently the most popular topic. Although a large number of encryption algorithms are available, these encryption

Use a password in Linux to encrypt and decrypt files Sometimes, you need to send a file containing sensitive information to someone over the internet, so you start to think, "My file contains some very sensitive information, how can I send files

In Linux, how does one-time password Ensure SSH login security? (1) Security is a process rather than a product. Although the SSH protocol is designed with a password, it is very secure, but if it is not properly managed: whether it is a weak

SQL Injection Vulnerability exposure-entryWith the development of B/S application development, more and more programmers are writing applications using this mode. However, due to the low entry threshold in this industry, the programmer's level and

[Security] (5): shellcode code18:08:45 In the previous section, we introduced the compilation of basic shellcode, using three system calls: exit (), setreuid (), and execve, in practice, You must select the appropriate system call based on your

PHP multipart/form-data Remote DOS Vulnerability When PHP parses the body part request header of the multipart/form-datahttp request, repeated copying of strings leads to DOS. A remote attacker sends a maliciously crafted multipart/form-data Request,

Analyze a js backdoor of WordPress We recently found a backdoor for collecting Administrator Logon creden on many WordPress sites. The victim website is inserted with hidden code. When the Administrator logs on, the code is triggered, the

Manual SQL Injection Entry If you have never tried SQL injection before, remove the check box before IE menu> Tools> Internet Options> advanced => show friendly HTTP Error messages. Otherwise, no matter what error is returned by the server, IE Only

How can I use xss to access the codoon network data background? 0x00 insert xss codoon android client motion circle dynamic comments can enter xss, in order to get the background url, I commented on the dynamic codoon xiaobian Not bad0x01 does not

You can reset the password of any user if you are not properly designed. First, I applied for an account to test the product. But what I never expected was that the design of the website was full of loopholes. Let's talk about the problem from an

Micro-client database leakage on a micro-site Database leakage on a microsite Http://www.vcooline.com/There are many major customers on the homepage.Source code, pants, and

Command Execution + getshell (leakage of name, phone number, ID card number, bank card number, etc) The system address is: Http://www.jsbbzy.com/manage/basepage/login_init.action  St2 vulnerability + getshell:  Command Execution:  Upload