Cloud Security

OpenSSL session ticket Memory leakage Vulnerability (CVE-2014-3567) Release date:Updated on: Affected Systems:OpenSSL Project OpenSSL Description:Bugtraq id: 70586CVE (CAN) ID: CVE-2014-3567 OpenSSL is an open-source SSL implementation that

Linux Bash Security Vulnerability repair Recently, a very serious security vulnerability was detected in the built-in Bash of Linux. Hackers can exploit this Bash vulnerability to completely control the target system and initiate attacks. To avoid

New malware iWorm has infected 17 thousand Mac computers worldwide Information security researchers recently discovered that more than 17 thousand Mac computers worldwide have been infected with a new OS X malware called iWorm. The malware used

How to simulate the debugger to terminate Kingsoft drug overlord Process and Its Repair Kingsoft drug overlord process is not self-protected. malicious programs can simulate a debugger to attach it to it and exit it. In short, there are only two

Arbitrary File Operations for OA Standard Edition In fact, it is the deletion of any file. The deletion function is well positioned, so the title is concealed. This arbitrary file can be deleted only in windows because it is a coincidence that the

Qq of Android version leaks comments to friends I thought it was a problem with the international version, but the result was still a problem with the Android version... Cheat the goddess to use qq for Android... Or you can buy a cell phone for

ShellShock (BashDoor) Repair Method Run the following command to check whether your system has the Bash Door vulnerability: Env-I X = '() {(a) => \ 'bash-C' echo date'; cat echo If a vulnerability exists, the output result contains no date,

4G Browser Remote Code Execution Vulnerability 4G Browser: http://4g.roboo.com/download dex2jar and jd-guiSearch addJavascriptInterface   Navigator interface VulnerabilityConstruct a Write File + pop-up window Exp:  test Pop-up

HFS 2.3x remote command execution (last day of hacker capture)This program is widely used in China, especially those who catch bots. Http: // localhost: 80 /? Searchpipeline 00000000000000.exe c | cmd .} Http: // localhost: 80/search00000000000000.

Microsoft Nokia Asha 501 lock screen Security Bypass Vulnerability (CVE-2014-6602) Release date:Updated on: Affected Systems:Microsoft Nokia Asha 501 14.0.4Description:Bugtraq id: 70040CVE (CAN) ID: CVE-2014-6602 Microsoft Nokia Asha 501 is a

B2Bbuilder latest Injection Vulnerability Although B2Bbuilder is less secure, it cannot be used up ~Detailed description: It should be better to report from the response center. Let's give EXP directly.0x1/ajax_back_end.phpPOST: catid = 1 and

Centos server ssh Security Settings The Internet is very dangerous. As the door to the server, ssh must be well configured for security. I have tested that A VPS enables the ssh service to listen to the default port 22. A few days later, the secure

Ssh Security Configuration in CentOS Ssh Security Configuration in CentOS Ssh configuration file directory:/Etc/ssh 1. Change the default ssh port: 22 # Vi/etc/ssh/ssh_config# Remove the Port commentPort 1433 (Port number)# Vi/etc/ssh/sshd_config#

All open-source systems of qibocms, Getshell Multiple studies will find that Getshell can be used.Look at all the open-source systems in qibo.You do not need to log on to Getshell.I have been struggling with this because it cannot be closed directly.

Grizzly Echo server development practices Grizzly Echo server development practices It is difficult to write Scalable Server Applications in Java. Using Java NIO for development, thread management, and Server Extension for thousands of users are all

Due to a defect in some xss filtering system principles, xss affects Dangdang's reading and show academic search websites with hundreds of links and academic searches. Sample http://search.dangdang.com /? Key = test This vulnerability exists in

General jige vulnerability packaging in Neusoft UniEAP The following system is developed using Neusoft UniEAP as the business framework: Inurl: siweb/login. do. It is estimated that some of the items cannot be searched. Google cannot use them. Baidu

CuteEditor for classic asp Vulnerability The CuteEditor for classic asp Vulnerability was accidentally discovered. The editor used a small amount and was directly released.Any directory and file:   GET

Apple ID can easily hit the database and steal accounts Apple ID can be easily hit.It is actually hit by an icloud credential. No matter how many times the error occurs, the test finds that https://appleid.apple.com/signindoes not have a

Apache Mina Development Manual II Apache Mina Development Manual II Iv. NIO Overview Nio api is introduced in Java 1.4. NIO means non-blocking I/O communication.Knowing that Mina's NIO was developed based on NIO-1, and that the library of NIO-2 was