Web Server Vulnerability

The days when XP announced a formal cessation of service were also the days when Openssl burst into big holes. All afternoon we are in a state of emergency, the spirit of tension, this vulnerability affects the 30–50% ratio of the use of HTTPS sites, including the regular visits: Alipay, micro-letter, Taobao, internet banking, social, portal and other well-known sites. As long as the site to visit HTTPS is likely to have the risk of sniffing data, around 5 o'clock in the afternoon Zoomeye completed this data scanning: National 443 ports: 1601250, 33 ...

1. Kernel-Level Vulnerability Dirty COW Dirty Cow Vulnerability. The COW mechanism of the Linux kernel memory subsystem competes with memory writes, causing read-only memory pages to be tampered with. Impact: Linux kernel> = 2.6.22 Vulnerability Affected: Low privilege Users can write to this read-only memory page (including a file read-only to this user on a writable file system) and to root PoC Reference: https://github.com/dirtycow/di ...

Security experts recently warned administrators using Microsoft Internet Information Services IIS 6 that Web servers are vulnerable to attacks and expose password-protected files and folders. It is reported that this vulnerability exists in some process commands based on WebDAV protocol. By adding some Unicode characters to the Web address, hackers can access these sensitive files, which are generally protected by a system password. In addition, the vulnerability can be used to upload malicious files to the server. Nikolaos Rangos safety researcher said, "W ...

Absrtact: December 29 News, in 12306 Web site database leaks, the site added a patch-day vulnerability response platform, and the director of the Chinese Academy of Railway Science, the single highest reward 2000 yuan, called on users to find loopholes. As of press, there have been more than 20 netizens submitted December 29 news, in 12306 Web site database leakage, the site added to the Patch-day vulnerability response platform, and the Director of China Railway Science Research Institute, a single maximum reward of 2000 yuan, called netizens to find loopholes. As of press, there have been more than 20 netizens submitted the vulnerability report, according to the discovery leakage ...

This article describes the benefits of using remote vulnerability scanning services in the cloud. This service can be loaded by any system from anywhere, as if a remote entity managed by a third party. The Open Source Vulnerability analysis tool can help open, comprehensive review of cloud security. Vulnerability analysis is only part of ensuring server security. 　　 　　Clearly, it is a big step in the right direction to precisely define a vulnerability assessment policy. 1, the introduction of any security policy, vulnerability assessment is a very important aspect. Now, for the internet ...

The Open Source Vulnerability analysis tool can help open, comprehensive review of cloud security. Vulnerability analysis is only part of ensuring server security. 　　Clearly, it is a big step in the right direction to precisely define a vulnerability assessment policy. 1, the introduction of any security policy, vulnerability assessment is a very important aspect. 　　Now, attacks on Internet hosts are increasingly driven by interest, so they are more cunning and more widely distributed. It seems difficult to protect all the Web servers, but most of the attacks launched by hackers can be avoided.

At the beginning of 2011, Jinshan Poison PA and 360 on "whether to disclose the user's privacy" just erupted a war of words, in this respect, 360 security expert Dr. Shi Xiaohong explained the technology of "cloud security", said, "360 did not disclose user privacy, but cloud security, cloud computing, the new technology system may put individual Login Vulnerability ' site leaked user privacy collection. If you want to fundamentally eliminate this situation, not only the safety manufacturers should pay attention to the proper handling of user information, Internet stations also need to actively repair the vulnerability. "Do not involve online banking, network payments and other accounts are currently 36 ...

At the beginning of 2011, Jinshan Poison PA and 360 on "whether to disclose the user's privacy" just erupted a war of words, in this respect, 360 security expert Dr. Shi Xiaohong explained the technology of "cloud security", said, "360 did not disclose user privacy, but cloud security, cloud computing, the new technology system may put individual Login Vulnerability ' site leaked user privacy collection. If you want to fundamentally eliminate this situation, not only the safety manufacturers should pay attention to the proper handling of user information, Internet stations also need to actively repair the vulnerability. "Does not involve on-line bank, the network payment and so on account number 360 Ann ...

May 20 reported IIS6 a WebDAV loophole, foreign media today reported that hackers have exploited this loophole in the United States, Indiana University of the server breached. Hackers did not waste a bit of time because it was Monday, just a few hours, before the leaks were published and exploited. As of Tuesday, the university's servers were still not repaired successfully and were expected to be fully repaired by Thursday or Friday. The US Computer Emergency Response Team recently revealed that the IIS6 WebDAV vulnerability found last week has been used in the attack, which is secured by the computer ...

Vulnerabilities in routers have become frequent in recent years, and routing vendors are often pointed out that there is a security problem with the equipment in store. Last night, security research company Check Point claimed to have found a significant routing vulnerability that could allow attackers to control home and small business routers, and route to an intranet device. Check Point says the vulnerability affects at least 12 million routes produced by more than 20 routing vendors, including TP, Link, Huawei and other well-known vendors. Given that this vulnerability is affected ...