Cloud Security

D-Link DCS-932L UDP request processing password leakage Vulnerability Release date:Updated on: Affected Systems:D-Link DCS-932L 1.02Description:--------------------------------------------------------------------------------Bugtraq id: 57011CVE (CAN)

CHICKEN 'read-u8vector! 'Process Remote Buffer Overflow Vulnerability Release date:Updated on: Affected Systems:CHICKEN stable 4.8.0.7Description:--------------------------------------------------------------------------------Bugtraq id: 67468CVE (

Linux Kernel Local Denial of Service Vulnerability Release date:Updated on: Affected Systems:Linux kernel 3.11-3.15Linux kernelDescription:--------------------------------------------------------------------------------Bugtraq id: 68126CVE (CAN)

Mobile CMCC-EDU with the Eline specified account brute-force, the specified Ip online offline When a user logs on to a mobile app, no restrictions are imposed, which may cause account cracking. In addition, when going online or going offline, the

Enterprises such as servers, desktops, laptops, and mobile devices are facing more and more attacks. The consequences of these attacks become more and more serious. A small amount of data leakage may cause millions of dollars in losses. Therefore,

0x00 background In the past two days, a customer reported that his website often encountered a mysql 1040 error. His online users only had less than one thousand, and the mysql configuration was okay. The linode160 + knife was used for one month

Using GPG for encrypted communication is the safest way. Keep your private key safe and exchange it with your friends in person. RSA 4096, you deserve it. It is said that developers are writing ECDSA algorithms, which is becoming more and more

Preface:The heartbleed vulnerability has pitted a wireless network. This time, it is used in a harsh way. The most common reason is the EAP-based Router, which is also used by many large companies. Original article addressBody:I have received a lot

Nine common methods to protect Linux System Security In this world, it is very important to ensure the security of Linux-based systems. But you have to know how to do it. A simple anti-malware software is far from enough. You need to take other

Reverse beginners [3]: Assembly basics-MiscellaneousI have learned the basic knowledge of the registers in the assembly language. This time I will summarize the remaining knowledge points that I have come up! Of course, compilation and programming

Reverse beginners [1]: getting started with assembly-Basic KnowledgeAccording to your own plan, you should turn to reverse learning after learning about WEB security. This is what you wanted to learn long ago-but has never put it into action. Today,

Sina Weibo has a large number of applications, such as judge.sinaapp.com and qmatch.sinaapp.com, which are applications with a large number of Weibo users. The oau22.Take judge.sinaapp.com as an example.Sina authorization

Before 0x00 For how to detect XSS in Flash, everyone has their own methods, whether it is using automated tools (such as swfscan) or self-developed automation tools (decompile first, and then Audit The actionscript code) or manually audits the code.

The full version here refers to the latest v9.5.6 + v9 others + phpcms 2008 + .. this vulnerability is used differently in Windows and Linux. In view of @ phpcms (10000 words omitted), it is understandable .. here I only provide Windows exploitation

0x00 background CRLF Injection is rare. I caught it this time. I think http://www.bkjia.com/Article/201406/312606.html has some students do not know much about this vulnerability, or even cannot tell it with CSRF, I will elaborate on it. CRLF is

I 've been trying to reduce the chances of someone attacking my form-based authentication-based web applications. I know that I cannot control the people who connect to the application, but what can I do to prevent attacks and lock the user's

The premise is that you must have the permission to manage the topic. Test version PHPCMS program version: Phpcms V9.5.6 Release 20140522 Process 1. Add a topic Topic name: test Topic banners:/1.jpg Thumbnail:/1.jpg Special guidance:

Traffic hijacking. After a period of silence on this old attack, it has recently started to stir up. Many well-known brands of routers have successively discovered security vulnerabilities, attracting domestic media reports. As long as the user does

Previous: http://www.bkjia.com/Article/201406/310931.html introduced the system, although can defend against simple inline XSS code, but want to bypass is still very easy. Because it is in front-end protection, policy configuration can be found in

Web substation SQL injection and sensitive information leakage an injection point... and a leakage of sensitive information ...,,,,Http://licaike.hexun.com/GjzDetail.action? ProdCode = 400008 & prodType = SThe prodCode has a problem.An error is