Cloud Security

There are both bright sunshine and underflow shadows in the Internet. when surfing the Internet, you may encounter various types of harassment ", such as spam ads, Internet viruses, and malicious programs. These "harassment" not only affects surfing

Although the Windows operating system leaves us with many bad memories, we must admit that Windows is still one of the most widely used systems. In the face of such a large and complex operating system, it is imperative to protect its security. For

From dark visitor More and more virus programs are destroying computer data, and some viruses are more directly formatting hard disk partitions.In fact, we can use small commands to prevent virus programs from formatting hard disks and other

1. Ensure that all servers use the latest system and install security patches. The Computer Emergency Response Coordination Center found that almost all systems under DDOS attacks were not patched in time. 2. Ensure that the Administrator checks all

Thanks to the excellent network functions of the Linux operating system, most website servers on the Internet use Linux as the main operating system. However, because the operating system is a multi-user operating system, Hackers often choose Linux

Surging clouds   The Struts2 wave is indeed very fast, and it also has something to do with POC. I wanted to write something, but I found thatNeeao has already been written very well.I don't want to draw any more.It is recommended that

When other factors are the same, a simple solution is the safest. The more code you write during software development, the higher the chance of errors. In statistics, there is a simple correspondence between the number of lines of code and the

Affected Versions: Apple Safari 5. xApple Safari 4.xVulnerability description: Bugtraq id: 42037CVE ID: CVE-2010-1785Safari is the default WEB browser bundled in the Apple family machine operating system. Safari Webkit does not correctly implement

Cnbird Basically, such problems rely on two main channels: 1. the gamer reports and follows the customer service path. The customer service plays the role of event and problem management. Once a problem is transferred to R & D, the internal

Recently, the server was frequently attacked by CC attacks. After packet capture and analysis of the number of connections, it was found that the number of concurrent connections on a single server reached more than 50 thousand. I wanted to use the

In modern life, passwords are like locks in our lives. The purpose of locking is to prevent intrusion. However, when we use scientific means to simplify our understanding of the world, we fall into the network of Self-woven passwords-often, while

Affected Versions:Linux kernel 2.6.x vulnerability description:Bugtraq id: 42900,42936Cve id: CVE-2010-2954 Linux Kernel is the Kernel used by open source Linux. The irda_bind () function in the net/irda/af_irda.c file of Linux Kernel has an error

When a foreigner tweeted to CSRF, he used the cross-origin vulnerability in the CSS style sheet to read twttr. form_authenticity_token and then carried out CSRF. Reference: http://seclists.org/fulldisclosure/2010/Sep/64 PS: After talking with

What is a good penetration test? Although executing a penetration test has many obvious advantages-the value of executing a penetration test lies in its results. These results must be valuable and easy to understand for the customer. There is a

Affected Versions: Squid Web Proxy Cache 3.2 Squid Web Proxy Cache 3.1 Squid Web Proxy Cache 3.0Vulnerability description: Bugtraq id: 42982Squid is an efficient Web Cache and proxy program, initially developed for the Unix platform, Now it has

TCP is a connection-oriented and reliable byte stream established based on the IP protocol. Today, as many hacker attacks emerge, an attacker can cheat by sending IP data from the IP Address Source Address belonging to another machine. TCP spoofing

Affected System xp */win 7 users may trigger dll hijacking if they use the cool music box to run MP3 files: #include #define DLLIMPORT __declspec (dllexport) int evil() {

MI: Malware Incidents CVI: Computer Virus Incidents WI: Worms Incidents THI: Trojan Horses Incidents BI: botnets Incidents BAI: Blended Attacks Incidents WBPI: Web Browser Plug-Ins Incidents) NAI: network Attacks Incidents DOSAI: Denial of Service

An attacker sends a POST request to the ASP page. the post request contains more than 40000 Request Parameters and uses x-www-form-urlencoded encoding when sending the request. Attackers exploit this vulnerability to cause the IIS auxiliary process

5up3rh3iblogIE8 Css Cross-Domain Information Disclosure VulnerabilityGmail JSON Hijacking Attack Technique In fact, this vulnerability is an archaeological "Antique": html ">CSS-String-Injection