Cloud Security

New Bank Trojan Anubis attack, a collection of ransomware, keyboard recorder, remote Trojan, anubis attack According to PhishLabs, a network security company, in 5th day of this month, they discovered a new variant of the Bank Trojan BankBot, which

Six common cloud security misunderstandings and six cloud security You may be familiar with the term "cloud/cloud computing", and as more and more enterprises begin to migrate their data to the cloud, it is clear that cloud computing and cloud

Cisco asa vpn xml Parser Denial of Service Vulnerability (CVE-2015-0677)Cisco asa vpn xml Parser Denial of Service Vulnerability (CVE-2015-0677) Release date:Updated on:Affected Systems: Cisco ASA 1, 5500 Description: CVE (CAN) ID: CVE-2015-067

WordPress Slideshow Gallery plugin 'admin. php' Arbitrary File Upload Vulnerability Release date:Updated on: 2014-09-03 Affected Systems:WordPress Slideshow Gallery 1.4.6Unaffected system:WordPress Slideshow Gallery 1.4.7Description:-----------------

Release date:Updated on: Affected Systems:Cisco ASR 9006Cisco ASR 9006Description:--------------------------------------------------------------------------------Bugtraq id: 48811Cve id: CVE-2011-2549 Cisco ASR 9000 series is an integrated service

SSH session hijacking for port forwarding During penetration testing, we sometimes encounter situations where we build a testing environment, product servers, DMZ, or other similar machine groups. In this case, we can regard them as a stepping stone.

Without nagios monitoring software, as long as the server can access the Internet, you can send an email to remind the administrator of the system load and CPU usage. 1. Install a mail client msmtp software (similar to a foxmail tool) in linux) 1.

By default, SSH has used secure data communication between remote machines. However, if you want to add another security layer for your SSH connection, you can add Google Authenticator) the two-factor authentication module allows you to enter a

Author: Fresh sunshine (Http://hi.baidu.com/newcenturysun)Date: 2007/08/11 (reprinted please keep this statement)I. Personal Computer Security Status Quo Analysis1. virus killing anti-virus software is no longer a new thingSince the orange s in the

Recently, news about Windows 7 antivirus software has attracted a lot of attention. Microsoft officially recommends anti-virus software for Windows 7 for the first time. Recently, many websites have been infected with Trojans, and rising has issued

  Anti-virus software is always a hot topic, especially free anti-virus software. It is said that the entire anti-virus industry is slowly switching to free, regardless of whether you agree or not, you always need to learn more about this free tide.

Execute arbitrary code in the Jinja2 template using the Python feature This article originated from the blog Injecting Flask published by @ nvisium on the blog. In the original article, the author explains how to use the Python template engine Jinja2

Open room information security-common SQL injection vulnerability in hotel information management system of a social platform (a large number of cases)Open room Information Security-General SQL injection vulnerability in

Pay attention to mobile phone number Security: Reporters investigate that new numbers are not "new" Harassment is followed   As mobile Internet is used more and more frequently, in the virtual world, we need to provide mobile phone numbers when

Attackers can exploit Padding Oracle attacks to obtain encryption keys. 0 × 00 Preface In this article, I would like to share some practical tips on using the padding oracle vulnerability. This type of vulnerability allows attackers to decrypt

How to insert Webshell into idat chunks of PNG Images By compiling a webshell into an image, you can bypass the server's boundary filter, and then let the shell actually appear out of thin air. (Not in comments or metadata encoding), how can I write

I. Introduction Today, the use of the Internet has risen sharply, but the vast majority of Internet users have no security knowledge background. Most people use the Internet to communicate with others by Email. For this reason, most websites allow

The topic of "cloud computing" has been in the industry for almost a year. Many readers still don't understand what this new architecture means? Recently, several mainstream anti-virus vendors, such as trends and rising stars, have announced the

Dork: Powered by UCenter inurl: shop. php? Ac = view Dork 2: inurl: shop. php? Ac = view & shopid = Vulnerability file: Shop. php Values :(?) Ac = view & shopid = Vulnerable Style: SQL Injection (MySQL Error Based) Need Metarials: Hex

    /* -------------------------------------------------------------------------- Zenphoto -------------------------------------------------------------------------- Author: Egidio Romano aka EgiX www.2cto.com n0b0d13s [at] gmail [dot] com : Http: