Cloud Security

Oracle Sun GlassFish Enterprise Server does not specify a Vulnerability Vulnerability Number: NIPC-2011-1323 CVE No.: CVE-2011-0807 Vulnerability Type: insufficient information Release date: Updated on:  CVSS value: 10.0 Severity Level:

Yealink network phone SIP-T38G absolute Path Traversal Vulnerability Release date:Updated on: Affected Systems:Yealink SIP-T38GDescription:--------------------------------------------------------------------------------CVE (CAN) ID:

Apache HTTP Server "httpOnly" Cookie Information Leakage Vulnerability Release date:Updated on: Affected Systems:Apache Group Apache HTTP Server 2.2.xUnaffected system:Apache Group Apache HTTP Server 2.2.22-devDescription:--------------------------

Squid HTTP header port number processing DoS Vulnerability Release date:Updated on: 2013-07-16 Affected Systems:Squid 3.xDescription:--------------------------------------------------------------------------------CVE (CAN) ID: CCVE-2013-4123 Squid

SAP NetWeaver Dispatcher DiagTraceR3Info Function Arbitrary Code Execution Vulnerability Release date:Updated on: Affected Systems:SAP NetWeaver Dispatcher EHP2SAP NetWeaver Dispatcher 7.0 EHP1Description:---------------------------------------------

When deleting a user, the system prompts that the user cannot run this operation on the built-in account. Generally, after hackers intrude into the server, they add new users or set Backdoor programs. If you find that the account cannot be deleted

Apache Security Configuration suggestions Apache Security Configuration suggestions are as follows:1. Try to install the new version of Apache2. disable unnecessary modules, find the loadModule line of httpd. conf, and comment out unnecessary

Use apmserv to build a site and use the default configuration to win server Permissions The default configuration of apmserv is incorrect. If it is light, the directory content is exposed and the database is viewed. If it is heavy, the upload shell

RubyGems Fileutils 'file _ utils. rb' Remote Command Execution Vulnerability Release date:Updated on: Affected Systems:Rubygems FileutilsDescription:--------------------------------------------------------------------------------Bugtraq id:

IBM WebSphere Portal SQL Injection Vulnerability (CVE-2014-3055) Release date:Updated on: Affected Systems:IBM Websphere Portal 8.xDescription:--------------------------------------------------------------------------------Bugtraq id: 68929CVE

DoS Vulnerabilities in multiple HP and H3C VPN firewall modules Release date:Updated on: Affected Systems:Hp vpn Firewall ModuleDescription:--------------------------------------------------------------------------------Bugtraq id: 68916CVE (CAN)

LPAR2RRD Command Injection Vulnerability (CVE-2014-4981) Release date:Updated on: Affected Systems:LPAR2RRD LPAR2RRD LPAR2RRD LPAR2RRD Unaffected system:LPAR2RRD LPAR2RRD> 4.53Description:------------------------------------------------------------

How hackers use cloud computing services to mine litecoin Hackers have been using malware to secretly convert the victim's PC into a botnet for a long time. But security researchers Rob Ragan and Oscar Salazar have different ideas: why not use

Counterfeit Google crawlers have become the third-largest DDoS attack tool   In the article Prolexic released the first quarter of 2014 Global DDoS attack report published by quickshield, we learned that the attack traffic initiated by the

Quick Method for High-strength encryption of USB flash drives General USB flash drives do not provide encryption functions, so the confidentiality of USB flash drives is not very good, while simple encryption USB flash drives are often very

Principle Analysis and anatomy of XSS (1) 0 × 01 preface: At the beginning, there was not much information about xss attack techniques on the Internet (they were all ready-made code and did not start from the basics ), it was not until the Thorn's

TSRC challenge: getshell defense ideas in PHP scenarios1. Background   WEB application vulnerabilities often cause intrusions. scanners and WAF cannot solve all the problems, so they try to provide a defense solution for the PHP environment on the

Eleven common cms shell MethodsDirectory:0x1 excellent south0x2 phpweb0x3 scientific news0x4 dedecms0x50x6 aspcms0x7 74cms0x8 phpcms0x9 shopex0x10 old Y Article Management System0x11 ecshopI. China SouthFor Liang Jing, I personally prefer to insert

How to check whether php websites have been cracked From: http://www.gregfreeman.org/2013/how-to-tell-if-your-php-site-has-been-compromised/0x01 view access logs  Check whether there is a file upload operation (POST method ),IPREMOVED--[01/Mar/2013:

Thoughts on getshell defense in PHP scenarios 1. Background WEB application vulnerabilities often cause intrusions. scanners and WAF cannot solve all the problems, so they try to provide a defense solution for the PHP environment on the host side.