Cloud Security

Linux Kernel rock. c Denial of Service Vulnerability (CVE-2014-9420) Release date:Updated on: Affected Systems:Linux kernel Description:Bugtraq id: 71883CVE (CAN) ID: CVE-2014-9420 Linux Kernel is the Kernel of the Linux operating system. For

Huawei USG9560/9520/9580 master Processing Unit (MPU) Memory leakage Denial of Service Vulnerability Release date:Updated on: Affected Systems:Huawei USG9560/9520/9580Description:Bugtraq id: 71788 Huawei USG9560/9520/9580 is a high-end 10 Gb

Remote Denial of Service Vulnerability (CVE-2014-8901) for multiple IBM DB2 Products) Release date:Updated on: Affected Systems:IBM DB2 IBM DB2 9.8-FP5IBM DB2 9.7-FP10IBM DB2 9.5-FP10IBM DB2 10.1-FP4Description:Bugtraq id: 71734CVE (CAN) ID: CVE-20

Zenoss Core storage-type XSS Vulnerability Release date:Updated on: Affected Systems:Zenoss Core Description:CVE (CAN) ID: CVE-2014-6254 Zenoss Core is an open-source IT monitoring solution. In versions earlier than Zenoss Core 5 Beta 3,

US military server raksmart tells you how to ensure server security Server security has always been a serious concern of enterprises. This is related to the development of enterprises and the trust of users. Especially in the last two years, there

ICANN was attacked by hackers, and employee account information was leaked. On July 22, December 18, Beijing time, ICANN, the Internet domain name management agency, said in a bulletin on Wednesday that unidentified attackers have cracked the

Exploring PHP DoS Attacks You can simulate simple attacks by yourself to learn more about how to be safer. How does it work? In general, hash tables are optimized very quickly. However, if someone inserts conflicting key values, the performance

Technical analysis: smart hardware worms threaten Internet Security Reference:  The global Internet DNS traffic has been abnormal since the previous day (January 1, December 10. The cloud dike Team (DamDDoS) Quickly participated in analysis and

MySQL injection vulnerability in a substation in Baidu MySQL injection vulnerability in a substation in Baidu DoS attacks are allowed. The verification script is attached. Injection point:

Research on Perl data type security0x01 Problem To put it bluntly, what is the problem that has existed in perl for 20 years? Throwing away the slot of perl syntax, the real problem lies in data types, which is the data type. Perl's processing of

ROCBOSS micro-Community V1.1 SQL Injection Vulnerability   The official version of ROCBOSS V1.1 has an SQL injection vulnerability:Vulnerability files:\ Module \ user. module. class. php11th lines of code:$ UserInfo = Common: getMemberInfo ($ this->

SQL Injection for a website on Sina Weibo SQL Injection for a website on Sina Weibo Vulnerability url Does the id parameter exist in the injection http://data.weibo.com/report/analystarticle? Id = 2205075871 http://data.weibo.com/report/reportDetail?

Phpok latest SQL injection and packaging The website will load some resource engines during initialization, with a session_file.php loaded for session Initialization. File framework/engine/session/file. php: function _ construct ($ config) {if (! $

Php cloud two SQL secondary injection Php cloud two-site secondary injection The latest version. Two injection points. Along with a little trick to bypass waf.First:/member/model/index. class. php39 rows  function index_action(){$this->public_action(

XSS Principle Analysis and anatomy: Chapter 4 (coding and bypassing) 0 × 01 Preface Sorry, I have been pushing the fourth chapter for a few months. Today is New Year's Day, so I will write down Chapter 4. I will first describe the encoding mainly

Ignored development security issues0x00 background This article aims to reveal the neglected development security issues, mainly for the infrastructure deployment environment basic solutions including (internal, external, cloud environment ).0x01

Maiyadi.com penetration notes0x00 is a few days ago. For some reason, OS X broke the Machook Trojan. A friend posted the Trojan on V2EX, called "a social engineering tour of Machook Trojan". A few days later, Livid posted a letter indicating that he

Reset any user password in the latest WSS version The design defect of the latest WSS version causes any user password reset, including Administrator File user_edit_password.php  This file and function is used to change the user password, which is

Web Security Practices (3) Analysis of http-based server architecture The web security practice series focuses on the practical research and some programming implementation of the content of hacker exposure-web Application Security secrets and

Php 5.x.x vulnerabilities (phpyun and new cloud cms shell testify) Php 5. x. x two small bugs are used in actual scenarios. This was not the case, but due to the fact that there are fresh examples during the cms white box review process, let's send