Cloud Security

Technical Analysis of Long-standing path hijacking   Today, the technology I want to explain has existed for a long time, but as far as I know, there are not many articles that have explained this technology in detail and complete. Of course,

"Ransomware income" already occupies the main part of the hacker's economic source Blackmail has become a popular way for hackers to get rich. According to a survey, "ransomware income" already occupies the main part of the hacker's economic source.

One-step understanding of CPU chip vulnerabilities: Meltdown and Spectre0X00 historical day On Jann Horn, a security researcher for the Google Project Zero (GPZ) team, reported two sets of CPU chip vulnerabilities in his team's blog [1] on June 18,

Wireshark 'epan/wslua/wslua_file.c 'Denial of Service Vulnerability (CVE-2017-17935)Wireshark 'epan/wslua/wslua_file.c 'Denial of Service Vulnerability (CVE-2017-17935) Release date:Updated on:Affected Systems: Wireshark Description: Bugtraq

Researchers use bypass attacks to steal encrypted information The attacks against SSL/TLS discovered in the past few years usually require attackers to be in the middle, that is, requiring them to sniff or manipulate traffic. Two security

Open source code containing known vulnerabilities is widely used. Enterprises are using a large number of open-source code, but they seldom perform security checks when using open-source code, an inevitable result is that the open source components

QEMU vmsvga_javaso_read_raw Function Denial of Service Vulnerability (CVE-2016-4454)QEMU vmsvga_javaso_read_raw Function Denial of Service Vulnerability (CVE-2016-4454) Release date:Updated on:Affected Systems: QEMU Description: CVE (CAN) ID:

Botnets dedicated to scientists and engineers Forcepoint Security Labs's Security researchers reported a botnet primarily targeting scientists, engineers, and scholars. They named the botnet Jaku (pdf), named after a planet in Star Wars, because

CVE-2016-1757 simple analysis 0x00 Abstract The latest 10.11.4 patch fixes a vulnerability that exploits conditional competition to Obtain Code Execution permissions. After understanding the kernel source code and poc, the vulnerability is analyzed

Analysis of Hack With Chrome Extension 0x00 Introduction As we all know, Web applications are becoming more and more popular. Many of them use Web, such as lifestyle, office, and entertainment. Browsers are one of the most commonly used tools for

Mysql backup script (mysqldump) in CentOS) #! /Bin/bash # Full backup mode, generally executed on the slave machine, suitable for small and medium mysql Databases # Delete backups 15 days ago # Author: fafu_li # Time: 2015.08.10source/etc/profile #

Finecms Affected version 2.3.0 and earlier versions updated from January 14, April 18. This problem does not exist in the latest version. Wooyun blew a http://www.wooyun.org/bugs/wooyun-2014-060197 using brute-force cracking verification code to

Test lab V8 online penetration LAB tutorial (1) Test Lab is an online Penetration Test Virtual Lab similar to the offline Security Lab. This lab environment contains 12 systems with various vulnerabilities and configuration errors. Each system has a

A Geely website exposes all source code. successfully won the server. You need to upgrade Nginx. Nginx parsing problem + Source Code leakage = server Permissions Http://2014beijing.geely.com/2014beijing.tar.gz1g or more source code. After

Shandong mobile has unauthorized mongodb access, causing a large amount of user information leakage. Shandong mobile has unauthorized mongodb access, causing a large amount of user information leakage (mobile phone number \ IMSI number \ coordinate

Command Execution in a system in Guizhou Province (involving details of nearly one million female family planning staff) Command Execution in a system in Guizhou Province (involving nearly one million female family planning staff/involving a large

Configure fail2ban to protect Apache HTTP servers from attacks Apache HTTP servers in the production environment may be attacked in different ways. Attackers may use brute force attacks or execute malicious scripts to attempt to access unauthorized

Hero mutual Entertainment's general SQL Injection getshell (full name gun battle/dance every day/Beautiful diary in summer/kung fu all-star) management background fall I don't know how to getshell ~ Can I open/m/list.html on the official game

When the sandbox of a passenger System Service terminal in Tangshan North Railway Station is bypassed, the CMD command can be called up to execute the command. What can be bypassed is the "passengers self-service Inquiry System" service terminal of

Some users do not know how to prevent secure logon using cookies As a web developer, the user login function cannot be avoided. But how many security technologies do you know about user login?Generally, cainiao only knows how to save user