Cloud Security

MongoDB Security Configuration0x00 MongoDB Permissions 1. No parameters are added during MongoDB installation. No permission verification is performed by default. login users can perform any operations on the database and remotely access the

Oracle WebLogic Server Remote Vulnerabilities (CVE-2014-4210) Release date:Updated on: Affected Systems:Oracle WebLogic Server 10.3.6.0Oracle WebLogic Server 10.0.2.0Description:------------------------------------------------------------------------

Unauthorized access to multiple Datum Systems products Release date:Updated on: Affected Systems:Datum Systems PSM-4500Datum Systems PSM-500Description:--------------------------------------------------------------------------------Bugtraq id:

FreeBSD devfs Local Security Vulnerability (CVE-2014-3001) Release date:Updated on: Affected Systems:FreeBSD Description:--------------------------------------------------------------------------------Bugtraq id: 67158CVE (CAN) ID:

Perl SVN: Look module Command Injection Vulnerability Release date:Updated on: Affected Systems:Perl SVN: Look 0.39Description:--------------------------------------------------------------------------------Bugtraq id: 67945 Perl is a high-level,

Novell Identity Manager Fan-Out platform service Arbitrary Command Execution Vulnerability Release date:Updated on: Affected Systems:Novell Identity Manager 4.0.2Description:--------------------------------------------------------------------------

Juniper NetScreen Firewall IPV6 packet processing DoS Vulnerability Release date:Updated on: Affected Systems:Juniper Networks NetScreen Firewall

Linux kernel rd_build_device_space function Information Leakage Vulnerability Release date:Updated on: Affected Systems:Linux kernel Description:--------------------------------------------------------------------------------CVE (CAN) ID: CVE-2014-40

GnuPG "do_uncompress ()" infinite loop Denial of Service Vulnerability Release date:Updated on: Affected Systems:GnuPG 2.0.xGnuPG 1.4.xDescription:--------------------------------------------------------------------------------CVE (CAN) ID: CVE-2014-

IBM Security Access Manager Remote Code Execution Vulnerability (CVE-2014-3073) Release date:Updated on: Affected Systems:IBM Security Access ManagerDescription:--------------------------------------------------------------------------------Bugtraq

D-Bus 'activation. c' DoS Vulnerability Release date:Updated on: Affected Systems:D-Bus 1.8.xD-Bus 1.6.xD-Bus 1.4.xD-Bus 1.2.xDescription:--------------------------------------------------------------------------------Bugtraq id: 67986CVE (CAN) ID:

Baidu Spark browser Stack Overflow Denial of Service Vulnerability Release date:Updated on: Affected Systems:Baidu Spark Browser 26.5.9999.3511Description:--------------------------------------------------------------------------------Bugtraq id: 682

On the TurboMail mail server, how does one Prevent email theft and Spam!Users cannot send or receive emails, network bandwidth is congested, and Server IP addresses are blacklisted. When this happens in the system, note that your email server system

Avoid Windows 8.1 security "traps" With the termination of the lifecycle of Windows XP, many enterprises choose to upgrade to Windows 8.1. Without a doubt, Windows 8.1 delivers ultimate speed, significantly improved workflows, and enhanced security.

Encryption and decryption-symmetric encryption and asymmetric encryption in SSL (https), sslhttpsHTTPS requires a handshake between the client (browser) and the server (website) before data transmission. During the handshake, the password

To protect users' financial information and personal privacy, many mobile phones require users to enter their personal identification code, biometric information, or four passwords before using their mobile phones. But is this method really useful

The RemoveXss function is mainly used for filtering XSS in PHP.The RemoveXss function is mainly used for filtering XSS in PHP. The RemoveXss function is mainly used to filter cross-site scripts. //Remove the exploer'bug XSSfunction RemoveXSS($val) {

1. Use encoding technologies such as URLEncode and ASCII code. For example, if or 1 = 1, % 6f % 72% 20% 31% 3d % 31, and Test can also be CHAR (101) + CHAR (97) + CHAR (115) + CHAR (116 ). 2. Use spaces to bypass such as two spaces to replace one

SQL Injection + File Inclusion Vulnerability in a website of China Telecom Rear one: http://rs.hntelecom.net.cn/HRSystem/initIndex.doBACKGROUND Two: http://rs.hntelecom.net.cn/loginadmin.do? M = loginVulnerability Type 1:The file contains:

The default two accounts are reporter and the auditor password is nsfocus.Log in with a common account and change the password, User % 5 Baccount % 5D = admin & user % 5 Bname % 5D = Admin & user % 5 Bpassword % 5D = admin123 & user % 5Bpassword.