heartbleed vulnerability

ref:https://www.anquanke.com/post/id/84922PHP Anti-Serialization Vulnerability Genesis and vulnerability mining techniques and casesI. Serialization and deserializationThe purpose of serialization and deserialization is to make it easier to transfer objects between programs. Serialization is one way to convert an object to a string to store the transport. Deserialization is exactly the inverse of the serial

= Ph4nt0m Security Team = Issue 0x03, Phile #0x05 of 0x07 | = --------------------------------------------------------------------------- = || = --------------- = [Browser hijacking using the window reference vulnerability and XSS vulnerability] = ------------- = || = --------------------------------------------------------------------------- = || = ----------------------------------------------------------

Ueditor recently exposed to high-risk loopholes, including the current official Ueditor 1.4.3.3 latest version, are affected by this vulnerability, Ueditor is the official Baidu technical team developed a front-end editor, you can upload pictures, write text, support custom HTML writing, Mobile and computer-side can be seamlessly docking, adaptive pages, pictures can automatically adapt to the current upload path and page scale, some video file upload

Alert! After installing the CPU vulnerability patch in Win7, a blue screen is displayed! Security mode cannot be used. win7 vulnerability patches After reporting last week that Windows 10 has accumulated an update of KB4056892, which causes incompatibility with AMD Athlon 64 x2 processors, it has recently reported that the upgrade of KB4056894 released by Microsoft for Windows 7 has failed, the error code

Cnbird We all know that in Windows + IIS6.0, if there is a directory like xxx. asp in the directory structure, all files under this directory will be parsed as asp regardless of the extension. We generally call this vulnerability windows2003 + iis6.0 directory Parsing Vulnerability. However, what you may not know is that the apache server has similar parsing vulnerabilities.Let's start the experiment. I ha

Reprinted from: http://intrepidusgroup.com/insight/2010/09/android-root-source-code-looking-at-the-c-skills/ Root andoid currently mainly relies on two vulnerabilities: udev of the init process and setuid of the adbd process. The following describes in detail. The rageagainstthecage program mentioned in previous articles uses the setuid vulnerability. The source code of these two vulnerabilities is here:/files/super119/rageagainstthecage.zip This is

not directly put the uploaded file in the root directory of the website, but saves it as a temporary file named $ _ FILES ['file'] ['tmp _ name, the developer must copy the temporary file to the saved website folder. $ _ FILES ['file'] ['tmp _ name'] values are set by PHP, which is different from the original file name, developers must use $ _ FILES ['file'] ['name'] to obtain the original name of the uploaded file. Error message during File Upload $ _ FILES ['file'] ['error'] variable is used

We all know that in Windows + iis6.0, if there is a directory like XXX. asp in the directory structure, all files under this directory will be parsed as ASP regardless of the extension. We generally call this vulnerability Windows2003 + iis6.0 directory Parsing Vulnerability. However, what you may not know is that the Apache server has similar parsing vulnerabilities.Let's start the experiment. I have built

intval function Gets the integer value of the variableThe maximum value of intval depends on the operating system. The 32-bit system maximum signed integer range is 2147483648 to 2147483647. For example, on such a system, intval (' 1000000000000 ') returns 2147483647. On a 64-bit system, the maximum signed integer value is 9223372036854775807.This has an application is to judge the value is not a palindrome, if the parameter is 2147483647, then when it is in turn, because the limit is exceeded,

Triangle MicroWorks SCADA Data Gateway TLS/DTLS Information Leakage Vulnerability Release date:Updated on: Affected Systems:Trianglemicroworks SCADA Data Gateway Description:--------------------------------------------------------------------------------SCADA Data Gateway is a Windows Application for system integrators and public utilities. It can collect OPC, IEC 60870-6 (TASE.2/ICCP), IEC 61850, IEC 60870-5, DNP3, the data on the Modbus Server/Slave