Cloud Security

Five "tricks" to prevent DDoS attacks" Many people are familiar with DDoS attacks. Last week, Linode, a dedicated virtual server provider, suffered a DDoS attack on January 1, December 29, affecting access to its Web servers. The API call and

Nvidia gpu vulnerability exposure allows you to view pornographic website browsing history Chrome's stealth mode may not be able to protect personal privacy under certain circumstances. Recently, a game player has exposed a vulnerability on Nvidia

Belkin N600 scam Vulnerability (CVE-2015-5987)Belkin N600 scam Vulnerability (CVE-2015-5987) Release date:Updated on:Affected Systems: Belkin F9K1102 2 2.10.17 Description: CVE (CAN) ID: CVE-2015-5987Belkin N600 is a wireless dual-band

Wireshark PPI parser DoS Vulnerability (CVE-2015-8741)Wireshark PPI parser DoS Vulnerability (CVE-2015-8741) Release date:Updated on:Affected Systems: Wireshark Wireshark 2.0.x-2.0.1 Description: CVE (CAN) ID: CVE-2015-8741Wireshark is the most

Wireshark DCOM parser Denial of Service Vulnerability (CVE-2015-8714)Wireshark DCOM parser Denial of Service Vulnerability (CVE-2015-8714) Release date:Updated on:Affected Systems: Wireshark Wireshark 1.12.0 - 1.12.8 Unaffected system: Wireshark

Hand injection char (60,112, 62) Tips Today we will discuss separator""Or the role of char (60,112, 62) in manual injectionFirst let's take a look...  Http://www.XXX.edu.cn/news/display.php? Id = 3111 & table = news + where + id = null + union +

China Mobile mailbox system weak password can enter I entered the Mailbox System and saw a lot of sensitive information. I found a page without a verification code, so I came to a burp dictionary brute-force attack (I will not crack it with a

Kingsoft WPS: loading OLE object memory not initialized second play This is a problem with QQ controls. More users! QQ control appcom. dll is not initialized, resulting in 00000000 address access error (QQ needs to be installed)Self-evaluation

Never authorized access to the Moutai main site can be shell (test environment permissions affect online business ideas) A Chinese, a Japanese, and an American can discuss in which country the wine is good,The Japanese said: Our rice wine is the

A data center may affect millions of domain names, including bat \ 360 (involving a large number of company ICP filing information) Rt, which is not repeated before Address :**.**.**.**Connect to ftp, idczk, 123456, found in the old system A

Destoon full-version waf Bypass Vulnerability Solution Strip_ SQL is the main security defense function of destoon. It mainly defends against injection vulnerabilities in most cases. This function can be bypassed. The injection vulnerability may

Man-in-the-middle attack html Injection  0 × 00 orders The article I wrote a long time ago is now shared. I declare in advance that I am a cool dish, so the analysis of leaked data will inevitably be negligent or wrong. I hope you will be more

An SQL Injection Vulnerability (leakage of car owner and dealer Information) Yimao Automotive Network is a company dedicated to the sales and consumption of new cars (including parallel imported cars, it also aims to solve the three major puzzles of

A penetration test report from foreigners A penetration test report issued by offensive security, which translates the key content :) The process is wonderful ~ The domain name for this test is: Export corpone.com First, check its DNS Server: Then

Amazon EC2 host environment: mining SSRF vulnerabilities in Node/Express applications   I recently encountered an SSRF (Server Side Request Forgery) vulnerability when mining an application ). This application is hosted on Amazon EC2. Node. js and

Exploitation of File Inclusion vulnerabilities in the DVWA Series After understanding the principles of file inclusion, we will go to DVWA and select low-level file inclusion. A prompt is displayed on the page. You can edit the page parameter in

Build your own yara Database I have seen some articles about yara before, but it is basically a translation article about how to write rules. However, in actual analysis, the number of rules or the yara rule repository is too small, and many files

9 high-level command execution vulnerability in DVWA Series Switch DVWA Security to the high Level and view the webpage source code in Command Execution.The stripslashes function is also used to process the obtained IP address. It is mainly used to

Sensitive Information Leakage of a GM System   First, svn leakage, http://qa.tank.duowan.com/manage/.svn/entries However, I found that svn could not view any files, but I can know the approximate directory and directly access the source code

A Chinese mobile game station remotely executes getshell over the Intranet. Struts2 Remote Command