Cloud Security

Samba File Sharing Service Remote Command Execution Vulnerability (CVE-2015-0240)   The violent CVE-2015-0240 security vulnerability occurs in the smbd daemon, which can be exploited by malicious samba clients. attackers send a specially crafted

Polar bastion host common user command execution (root permission) Polar internal control bastion hosts use advanced technologies to protect internal network devices and servers, and monitor and audit common access methods for such assets, it can

Detailed configuration of OSSEC reinforced linux System OSSEC is an open-source host-based intrusion detection system that performs log analysis, file integrity check, policy monitoring, rootkit detection, real-time alarms and positive responses. It

SMB packet capture cracking windows login passwordI personally feel that several desktop security vendors in China pay more attention to the traditional AV Technology. I think they should expand their defense depth and open up network intrusion

Samba Log Analysis As the security level of file sharing increases, logs need to be recorded and audited in more and more cases. The configuration file of the Samba service in Linux is smb. conf. Many graphical configuration tools, such as Webmin,

"Blood cases" caused by the Ghost Vulnerability"0x00 background A security company recently discovered the glibc gethostbyname buffer overflow vulnerability, which is named as ghost because the Gethostbyname function of glibc caused a heap overflow

How to Set tomcat securitySecurity reinforcement: Tomcat is the hardest hit area. So we sorted out Tomcat security reinforcement. 1. upgrade to the latest stable version. Currently, Tomcat supports versions 6.0 and 7.0. 1) For stability

SF app verifies user vulnerabilities and obtains coupons and solutions for others in batches. The SF Express app did not verify the account currently logged in when querying SF coupons, so that you can view SF coupons under other accounts. $nn=800008

Bash Vulnerability Detection Methods You can run the following command to check whether the system has this vulnerability (running in the local Bash environment ):Shell 1, CVE-2014-6271, Test method:Env x = '() {:;}; echo vulnerable' bash-c "echo

How to obtain the plaintext password of the IIS application pool account Sometimes, in order to obtain the necessary permissions, we will set a local or domain account for the identity of the IIS application pool to run. For example, SharePoint

Binary vulnerability Mining0X00 preface: Binary vulnerability research can be divided into vulnerability analysis and exploitation and vulnerability mining. A large number of articles can be found on the Internet used for vulnerability analysis, but

Linux Kernel 'sk _ dst_get () 'DoS Vulnerability Release date:Updated on: Affected Systems:Linux kernelDescription:Bugtraq id: 72435 Linux Kernel is the Kernel of the Linux operating system. Linux Kernel has a denial of service vulnerability in

Xen Denial of Service Vulnerability (CVE-2015-0268) Release date:Updated on: Affected Systems:XenSource Xen> = 4.5Description:Bugtraq id: 72591CVE (CAN) ID: CVE-2015-0268 Xen is an open-source Virtual Machine monitor developed by the University of

Alimama's API design error causes the master site to upload arbitrary files 1. Capture and upload the Avatar address on the client.  2. If you want to upload any file, you just need to modify the file name and the internal token. Here, you only

Damai.cn waf bypass (three injection points are given to the deputy account) Injection: http://news.damai.cn/FrontNewsAdmin/NewsContentAction.do? LabelName = injection parameter & newsId = 272 & number = 4 & _ action = getRelatedNews Regular

China Mobile's school news, people-to-people, And Getshell contain more than 20 database information China Mobile Communications Group Co., Ltd. is a subsidiary of China Mobile Communications Group. The Getshell website allows hackers to connect to

Zhcms v1.0 SQL injection + Arbitrary Code Execution I. background login bypass caused by SQL Injection Check UserAction. class. php to process the Login method in the code. Public function login () {if (! Empty ($ _ POST ['code']) {if ((! Empty ($ _

Touniu order insurance price tampering Touniu order, price can be tamperedHttp://www.tuniu.com/who will choose a travel route, then select the corresponding package, submit the order, do not pay. At this time, go to the background to view the

Suning Tesco has multiple super administrator weak passwords in the background of a system (the verification code can be reused) Suning Tesco has multiple super administrator weak passwords in the background of a system (the verification code can be

A site in Suning has a chicken ribs DB2 injection (with verification scripts) and Solutions Parameters of a site in Suning are not completely filtered, and some SQL Injection risks exist.Because the from keyword is filtered out, it is a DB2