Cloud Security

ZOHO ManageEngine Password Manager Pro Multiple Cross-Site Scripting Vulnerabilities (CVE-2017-17698)ZOHO ManageEngine Password Manager Pro Multiple Cross-Site Scripting Vulnerabilities (CVE-2017-17698) Release date:Updated on:Affected Systems:

The WhatsApp server has a vulnerability. You can add irrelevant persons to a private group. REUTERS Since 2016, WhatsApp has provided end-to-end encryption for its communication services, encrypting text, photos, and video content between users,

Huawei FusionSphere OpenStack information leakage (CVE-2017-8191)Huawei FusionSphere OpenStack information leakage (CVE-2017-8191) Release date:Updated on:Affected Systems: Huawei FusionSphere OpenStack 100R006C00SPC102 (NFV) Description:

F5 BIG-IP Remote Denial of Service Vulnerability (CVE-2017-6166)F5 BIG-IP Remote Denial of Service Vulnerability (CVE-2017-6166) Release date:Updated on:Affected Systems: F5 BIG-IP Description: Bugtraq id: 102264CVE (CAN) ID: CVE-2017-6166F5

IBM QRadar SIEM Command Injection Vulnerability (CVE-2017-1696)IBM QRadar SIEM Command Injection Vulnerability (CVE-2017-1696) Release date:Updated on:Affected Systems: IBM QRadar 7.3IBM QRadar 7.2 Description: Bugtraq id: 102283CVE (CAN) ID:

How to handle IIS FastCGI vulnerability, iisfastcgi FastCGI Parsing Vulnerability: Improper configuration of WebServer Fastcgi may cause other files (such as css, js, jpg and other static files) to be parsed and executed as php scripts. When a user

Comments: The clone account is the account of the clone administrator. The cloned account has the same permissions as the administrator. Therefore, the harm of the clone account is particularly serious in server security, generally, clone accounts

Comments: I will share my experience on anti-black web site protection. For more information, see webmasters.1. Set strict PermissionsOnly write and read permissions are allowed for the upload directory, but execution permissions are not allowed.Set

Comments: Some websites have become bigger. there will be a small vulnerability. enthusiastic netizens will announce it when they find it. today, a netizen published one. let's take a look at the pure test and find that the mobile phone has not been

Comments: How can enterprises mitigate web application threats? Almost all enterprises now establish websites on the Internet. They not only provide information through websites, they also interact with their customers through Web applications,

Comments: Path explosion problem. The principle should be similar to other explosive paths. Haha night cat paper has wood !!! This editor vulnerability has been found in some forums and is not easy to write. I don't know whether you have met this

Centos7 script for monitoring httpd running status#!/bin/bash# Get running statushttp=$(systemctlstatushttpd|grepActive|awk'{print$2}')# Determining the running statusif["$http"!="active"];then# If the running status is failed, restart is attempted

Comments: If you use a virtual host or shared space, you can ask the host provider to Install MCAFEE. ASP suffix database, you can let him set only for your website directory. Go to the Mcafee VirusScan console, double-click access protection->

Comments: In order to make the server more secure, it is better to extract and run Backdoor programs. The following settings are very necessary for the server. Here are some guiding settings that more people can use on their own. The premise is that

Comments: This document describes how to defend against and delete the calc.exe virus. For more information, see:Traverse Disk TypeAdditional information: C:Action Description: Privilege EscalationAdditional information: "SeDebugPrivilege"Action

Comments: Taking Windows XP as an example, there is a commonly used but powerful command in the system, that is, the syskey command. This command can effectively enhance your system security. Maybe you have to enter your account and password when

Comments: After Reading Kabbah's driver, we found that its kl1.sys will read the parameters during BOOT, and then run the command in drivers. the dat driver decrypts and allocates the memory to load it by itself (the loaded Code fills the IAT part

Comments: Nowadays, many so-called encryption software for folder encryption and file encryption are popular on the Internet. Many of them are personal programs written based on open source code, most of them are implemented using the windows

Comments: You certainly won't design an Internet access network without a firewall. Therefore, how do you set up an unencrypted wireless network? Understanding wireless encryption is very important for deploying a secure wireless network. The

Comments: Currently, many website passwords are encrypted using the MD5 method, which is irreversible. Therefore, it is impossible to restore the encrypted passwords based on the ciphertext. Here, the conversion process from plaintext to MD5