Cloud Security

In August 1995, the Internet Engineering leading group (IESG) approved the RFC for IPSP as an InternetStandard Series recommendation standards. In addition to RFC 1828 and RFC 1829, there are two experimental RFC files.It is stipulated that the

Source: http://tech.ccidnet.com/In the network economy era, the Internet has already entered thousands of households. When we enjoy the Internet, we often leave network security problems behind. In fact, risks are everywhere. Firewalls are an

Firewalls can be divided into several different security levels. In Linux, because there are many different firewall software options, the security can be low and high, and the most complex software can provide almost no penetration protection

Intended audience: general online usersObjective: To prevent and solve common Trojan viruses without using any external tools There are too many documents on the Internet about virus and Trojan Horses. It is hard to say that they are their original

A high-risk vulnerability was recently reported in the most tuesbuy program 3.0 _ 20111207. Using this vulnerability, intruders can obtain a large number of user information and order information of the most tuesbuy website within 10

Public List getUserByName (String name, String password ){ResultSet rs = null;PreparedStatement stat = null;Connection conn = null;List list = new ArrayList ();Try {Conn = createConnection ();String SQL = "select name, password from manager where

The cause is that an xweibo injection vulnerability was discovered. However, it was found that this function requires management permissions. This is always the case... But find something interesting.Detailed description:Xweibo first implements a

First upload:You can directly access the file in admin/Fckeditor/maxcms_upload.htm. Maxcms_upload.htm: Form name = "form" id = "form" enctype = "multipart/form-data" action = "maxcms_upload.asp? Act = up "method = post> Call

The member center's query of member information statement filtering is lax, resulting in the url can submit injection parameters;The member center does not strictly filter uploading actions, resulting in an upload vulnerability.Detailed description:①

Basic authentication doesn' t work Using HTTP basic authentication to protect backends or adminitrative panels is a bad idea. of course, setting up HTTP Basic auth for the web server you live most is a trivial configuration exercise, however this

The main problems are as follows:1. the user login Form uses GET to submit it to the server for verification (in some cases, it can be sniffed by other malicious users on the proxy or network)2. the user password is saved as md5 in the sundxshop

Goals: http://www.coremail.cn/Program: Deep Throat CMSThere is an SQL injection vulnerability that may cause arbitrary file reading. Someone may have discovered it early. I will send it if no one sends it. Detailed

Http://music.weibo.com song rating filtering is lax, only the script tag, http is filtered, can be bypassed by the tag event attribute. To demonstrate the dangers of xss, I wrote a js script for div layer phishing. The basic process is: Js

Problem site http:// SC .m.sohu.com No 1 parallel permission modify arbitrary user shipping address register 2 accounts A Account UID = 0c0525ac6b934bas B account UID = 672f91694a6a485s A account access http:// SC

I don't know if this is a BUG, but I think this simple thing can be found by people who should pay attention to it. Specifically, it is the new version of the bar service background to check the user's complete IP address.First, you have to be the

In this test, we will use VeryCD's own business logic and big data published on the Internet to perform a white hat test on VeryCD. # It is only a test behavior. To explain the severity of big data HACK to the public, no data of VeryCD is exported. #

The password retrieval function of codoon allows you to modify the password of any user if you know the registered email address.Step 1: Click forgot password. You will be asked to enter the registered email address. Enter and click "retrieve

The problem lies in the simplified business. First, apply for a simplified product. Enter the Intranet IP address for the website address to directly access the Intranet web.Fill in the Intranet IP: 10.0.183.1 this guess a little difficult, if not

To allow end users to upload files to your website, it is like opening another door for malicious users who compromise your server. Even so, in today's modern Internet Web applications, it is a common requirement because it helps increase your

The audit target is what I saw on the exploit-db network. Pligg CMS 2.0.0rc2-CSRF File Creation Vulnerability -Create File by CSRF Exploit-">   The above is the exp of the vulnerability exploitation code. Let's look at the source code. I analyzed