Cloud Security

Baidu COM control BaiduSetupAx Remote Stack Overflow Vulnerability The length verification of the COM control BaiduSetupAx parameter is incomplete. Malformed parameters can cause stack overflow. This control will install and run the download program

Cross-Domain command execution (QQ, browser, email, etc.) is caused by xss stored in the whole system of IOS) The last edit was tested and found that the ios version existed a long time ago. It may have been in existence for many years. It can

Detailed configuration of OSSEC reinforced linux System OSSEC is an open-source host-based intrusion detection system that performs log analysis, file integrity check, policy monitoring, rootkit detection, real-time alarms and positive responses. It

A large number of hikvision video surveillance systems have the openssl vulnerability. A large number of hikvision video monitors have the openssl vulnerability to leak important information (including account and password)Hikvision video

Use 360 to solve the ARP virus problem in the LAN ARP viruses in Lan are clearly listed as common computer faults in today's increasingly secure Internet environment. It is helpless for cainiao, so how should we solve the ARP virus problem in the

Check your IPv6 address component to prevent it from being vulnerable. IPv6 "neighboring discovery" (ND) is the core part of the IPv6 protocol stack. It is used for IPv6 address resolution and automatic configuration of IPv6 stateless addresses.

Shell scripts for safely deleting and restoring files in CentOS Currently, most of the Linux file systems are in Ext3 format. Once a file is deleted, it may not be restored, even if it can be recovered. Therefore, executing the rm command becomes

CentOS 6.x one-click pptp vpn installation scriptEnvironment CentOS 6.x 32-bit/64-bitXEN/KVM/OpenVZProcedure Run the following commands in sequence #wgethttp://www.hi-vps.com/shell/vpn_centos6.sh #chmoda+xvpn_centos6.shInstall Centos6.2PPTPVPN

Anti-Virus Defense Research: monitoring the replication and auto-deletion of malicious programsI. Preface monitors the changes of directories in computer systems and files in directories in real time to effectively detect changes to files. In

How to check whether the Mac system is infected with the iWorm virus? Recently, a Mac system virus called "iWorm" spread freely. It can execute commands on Mac computers and steal user data. According to statistics, 18.5 thousand Mac computers

Research on Anti-Virus Defense: DLL injection (lower) -- DLL-free Injection I. Preface generally, to inject a program compiled by myself into other processes, you must use a DLL file. This method has been discussed in the previous article. But in

A storage-type xss vulnerability exists in a system of flush to form a worm effect. A storage-type xss vulnerability exists in a system in huashun, which can be spontaneously propagated to form a worm effect. Any js code can be written to the

Mysql injection after limitFirst understand a stored procedure, analyze: Provides optimization suggestions for each column by analyzing the results of the select query. It is mainly used to execute our error statements and delay statements. This is

Discuz! Getshell Some forums may be stored in other directories without the utility direct convert. If you see that the data/directory of the conversion program cannot be written, you don't have to try

Netease SSRF can detect the Intranet Vulnerability URL: http://note.youdao.com/memory? Url = http://www.wooyun.org (register for login if you need) Where the body is previewed Content as a displayTrack the jump of a webpage  POST

Spring and Autumn tourism allows unauthorized modification of others' personal information Spring and Autumn tourism allows unauthorized modification of others' personal informationFirst, register two accounts, log on to one of the accounts, and

Autonavi's important system management system fell Autonavi's important system management system fell1) the problematic system is: Http://boss.mapabc.com/   2) The information obtained by the last arbitrary user information query vulnerability

UWA 2.X v2.1.5 Multiple SQL injections Look at this function /Core/lib/core/Db. class. php protected function parse_value($value) {if(is_string($value)) {$value = '\'' . $this->escape_string($value) . '\'';}elseif(isset($value[0]) &&

Fanke network resets any User Password Fanke, the largest self-service website building platform in China. When I visited the website in my spare time recently, I accidentally found that several websites were self-built on the fanke platform. I

The POC script is attached to another SQL blind note in Sohu focus home A Boolean blind note in the focal point home, with a JS script, is only used for vulnerability verification. 1. Injection