Cloud Security

How to simulate the debugger to terminate Kingsoft drug overlord Process and Its Repair Kingsoft drug overlord process is not self-protected. malicious programs can simulate a debugger to attach it to it and exit it. In short, there are only two

Website security dog IIS6.0 parse webshell access restrictions bypass Security should be a complete system. If there is a defect in a place, the building will collapse.When accessing IIS6.0 parsing shells, such as a.asp;.jpg/a.asp;a.jpg, etc., it

ShellShock (BashDoor) Repair Method Run the following command to check whether your system has the Bash Door vulnerability: Env-I X = '() {(a) => \ 'bash-C' echo date'; cat echo If a vulnerability exists, the output result contains no date,

Multiple SQL injection vulnerabilities in the Zend Framework Sqlsrv driver Release date:Updated on: Affected Systems:Zend FrameworkDescription:Bugtraq id: 70011 Zend Framework (ZF) is an open-source PHP5 development Framework that can be used to

D-Bus local Heap Buffer Overflow Vulnerability (CVE-2014-3635) Release date:Updated on: Affected Systems:D-Bus 1.8.xDescription:Bugtraq id: 69831CVE (CAN) ID: CVE-2014-3635 D-Bus is an asynchronous inter-process communication system. It is mainly

Apt Security Restriction Bypass Vulnerability (CVE-2014-0488) Release date:Updated on: Affected Systems:Ubuntu aptDescription:Bugtraq id: 69838CVE (CAN) ID: CVE-2014-0488 The apt package is the advanced frontend of dpkg. When APT has never been

Oracle MySQL Client yaSSL certificate Decoding Buffer Overflow Vulnerability Release date:Updated on: Affected Systems:Oracle MySQLUnaffected system:Oracle MySQL 5.6.20Oracle MySQL 5.5.39Description:Bugtraq id: 69743 MySQL is an open-source

Open-Xchange AppSuite XSS Vulnerability (CVE-2014-5237) Release date:Updated on: Affected Systems:Open-xchange OX App Suite Description:Bugtraq id: 69794CVE (CAN) ID: CVE-2014-5237 Open-Xchange Server is a part of Open-source projects that mainly

The password storage design of a game in Kingsoft is not secure (you can play back and directly log on to the game) A game password is directly stored in the base address. If a trojan is in the user, you only need to read the base address to obtain

How to check whether the CentOS server is under DDOS Attack Log on to your server and run the following command as the root user to check whether your server is under DDOS Attack:netstat -anp |grep 'tcp\|udp' | awk '{print $5}' | cut -d: -f1 | sort |

CentOS SYSTEM account and logon Security 1. reasonably use the Shell history Command record Function In Linux, you can use the history command to view all the user's historical operation records, and the shell command operation records are stored in

A shell script that gently restarts the Centos ProcessThe main purpose is to restart important processes in the background. If killall-9 is used to force kill, the problem may occur. For example, the database process. The Code is as follows:#!

PageAdmin can bypass authentication to forge arbitrary user identity login (front-end, back-end) It turns out that there was a verification, but I accidentally thought of a way to bypass it.Let's talk about the process first: Front-end:Initial

Baidu map persistent XSS Vulnerability 1. Baidu map has a reflection-form XSS vulnerability, but it can become persistent. 2. An XSS connection exists.  http://map.baidu.com/?newmap=1&shareurl=2&l=12&tn=B_NORMAL_MAP&c=13382905,3515188&s=bd%26fstq%3D1

Colorwork stored XSS vulnerability allows you to obtain permissions of other users (3 packages) Previously, my friend reported that the XSS was fixed, but it was obvious that the XSS was fixed ......Other Locations still have loose filtering and

[Non-advertising] 2014 China Internet Security Conference ISC (I)In a twinkling of an eye, one year has passed. In July, I participated in the ISC in July. Today I registered 2014 ISC again. I attended the two-day conference forum at the National

74cms (20140709) 9 injection pack Instead of modifying the vulnerability code, you can modify the filter function, although you cannot bypass this filter function.However, the filter is not perfect and data can be generated.We recommend that you

Ecmall SQL injection first. Try the patch.In app/message. app. php   Function drop () {$ msg_ids = isset ($ _ GET ['msg _ id'])? Trim ($ _ GET ['msg _ id']): ''; if (! $ Msg_ids) {$ this-> show_warning ('no _ such_message '); return;} $ msg_ids =

An unauthorized change to any user information in a substation of Spring Airlines I first registered two numbers, and made up two resumes.     Let's change the second resume, grab a package, and change the ID.  Click submit data and I

File Inclusion on the official website of cutting-edge Tongchuang technology results in obtaining the Server shell Manufacturer, can you ask for a small gift? cainiao says it's okay if you haven't received a gift -.-Ask a large vendor.Attackers can