Cloud Security

Huawei E355s Information Leakage VulnerabilityHuawei E355s Information Leakage Vulnerability Release date:Updated on:Affected Systems: Huawei E355 Description: Bugtraq id: 74397CVE (CAN) ID: CVE-2015-3912Huawei E355 is a wireless network card

Cisco MediaSense Cross-Site Request Forgery (CVE-2015-0736)Cisco MediaSense Cross-Site Request Forgery (CVE-2015-0736) Release date:Updated on:Affected Systems: Cisco MediaSense 10.5 (1) Description: Bugtraq id: 74671CVE (CAN) ID: CVE-2015-0736

CURL/libcURL out-of-bounds read Denial of Service Vulnerability (CVE-2015-3145)CURL/libcURL out-of-bounds read Denial of Service Vulnerability (CVE-2015-3145) Release date:Updated on:Affected Systems: CURL 7.37.0-7.41.0 Description: Bugtraq id:

Php phar 'phar _ tar_process_metadata () 'Function Heap Memory Corruption VulnerabilityPhp phar 'phar _ tar_process_metadata () 'Function Heap Memory Corruption Vulnerability Release date:Updated on:Affected Systems: PHP Description: Bugtraq

Wireshark LBMR parser Remote Denial of Service VulnerabilityWireshark LBMR parser Remote Denial of Service Vulnerability Release date:Updated on:Affected Systems: Wireshark 1.12.0-1.12.4 Description: Bugtraq id: 74632CVE (CAN) ID: CVE-2015-3809

Xen Information Leakage Vulnerability (CVE-2015-3340)Xen Information Leakage Vulnerability (CVE-2015-3340) Release date:Updated on:Affected Systems: XenSource Xen 4.2.x-4.5.x Description: Bugtraq id: 74248CVE (CAN) ID: CVE-2015-3340Xen is an

Adobe Flash Player and air aslr Security Restriction Bypass VulnerabilityAdobe Flash Player and air aslr Security Restriction Bypass Vulnerability Release date:Updated on:Affected Systems: Adobe Flash Player Adobe Flash Player Adobe Flash Player

Ubuntu 14.04 NTP amplification Attack Vulnerability repair Network Time Protocol (NTP) is a Network transmission Protocol that synchronizes the clock of two computers through Packet Exchange. NTP uses UDP port 123 as the transport layer. It is used

Bypassing CSRF ProtectionSignature = [HOST] | utmccn = (referral) | utmcmd = referral | utmcct = [PATH] example: 123456.123456789.11.2.utmcsr = blackfan.ru | utmccn = (referral) | utmcmd = referral | utmcct =/path/2) users can completely control the

Intranet penetration: domain penetration techniquePreface domain management process transfer allows penetration testers to simulate Domain Name Administrator accounts on the Internet to perform operations. However, before the penetration test starts,

Unwrapped hacker links When we download RAR or ZIP packages of videos and audio from the Internet, we sometimes find that, one or more files may be named "playback must read" or "installation must read". These files may be HTML webpage link files

Centos system initialization script#! /Bin/bash # author: honway. liu # mail: gm100861@gmail.com # blog: http://linuxsogood.org# Date: 2013-06-25if [$ (id-u )! = 0]; thenecho "Must be root can do this. "exit 9fi # set privilegeschmod

CentOS shell for backdoor QueryEach process has a PID, and each PID has a corresponding directory under the/proc Directory, which is the implementation of the Linux (current kernel 2.6) system.Generally, backdoor programs cannot be found in ps and

Shell script checks and monitors the CPU usage of mysqlWhen the site traffic is large, mysql is under a high pressure. When the CPU usage of mysql exceeds 300%, it cannot provide services, and it is almost stuck. At this time, the best way is to

More than 20 control commands: Remote Control Trojan Dendoroid. B Analysis Report Recently, the 360 team intercepted a powerful professional spyware program, which can be used to remotely control the mobile phone number of users through the PC. It

Brazilian bank Trojan lurking in the SQL database   System Administrators and common users have headaches in spam. A considerable number of spam will spread the "sex drug sales" link to entice users to click the link and access malicious

Security Expert Karen Scarfone analyzes top comprehensive Encryption Products Security Expert Karen Scarfone analyzed several top full encryption products on the market one by one, and determined which one may be the most suitable for your company.

Web Security Technology (4)-common attacks and defenseA Web application may face many different attacks. The following describes some common attack methods and defense methods against these attacks.1. Cross-Site scripting (XSS) stands for Cross-Site

Weipin may cause tens of thousands of + appleids and passwords to be leaked due to improper configuration of an APPLE Click system. Weipin may cause tens of thousands of + appleids and passwords to be leaked due to improper configuration of an APPLE

Lenovo's important Substation POST Injection Vulnerability Lenovo's important Substation POST Injection Vulnerability Sqlmap-u "http://yun.lenovo.com/join.php" -- data = "keywords =-1 & search ="-p keywords -- dbsKeyword injection exists.Web