Security Forum

Server-side request Forgery (SSRF) is a security vulnerability that allows an attacker to induce the server-side application to make HTTP requests to an arbitrary domain chosen by the attacker. This article details the discovery, exploitation, and mitigation of an SSRF vulnerability in the HiTranslate application, a popular app used to translate...

A signal handler race condition was found in OpenSSH's server (sshd), where a client does not authenticate within LoginGraceTime seconds (120 by default, 600 in old OpenSSH versions), then sshd's SIGALRM handler is called asynchronously. However, this signal handler calls various functions that are not async-signal-safe, for example, syslog(). ...

I’m interested in a career change. My current job involves a lot of logic problems, though not IT related. With some research it appears cyber security and ethical hacking might be a career path for me to pursue. Are there any free online courses or topics suggested I search on YouTube, etc, that would help me learn about cyber security so I...

The advent of Artificial General Intelligence (AGI) has sparked debates and concerns among experts. Demetrius A. Floudas, an AI policy theorist, emphasizes the critical need for security measures and international regulation in the development of AGI. The Three Epochs of AI In his analysis, Floudas introduces a novel classification for the...

When you’re planning to launch a startup, or are already taking the first steps towards expanding your new business, one of your most urgent priorities should be establishing a comprehensive data security solution. Establishing the best data security practices and full cloud data security will give you a clear competitive edge over your...

Hey forum members, I'm exploring options for SSL certificates for multiple domains. Has anyone had experience with multi-domain SSL certificates? Any recommendations on reliable providers or specific features to look out for? I want to ensure secure connections across several domains and would appreciate any insights or advice from the community....

I'm Chinese and I want to visit the international website such as Tik Tok，Twitter and Facebook，how can I do it without paying？I want somebody to help me.

Cybersecurity engineering is a specialized field that focuses on the design, development, and implementation of systems, processes, and technologies that protect against cyber threats and vulnerabilities. Cyber security engineers work to ensure the confidentiality, integrity, and availability of information systems and data by implementing...

I have lots of problemes in my pc.It has lots of virus. I CAN NOT SEE MY HIDEN FILES. IT IS NOT SHOWING FOLDER OPTION. PLS. TELL ME THE SOLUTION KAPIL SACHDEVA

About a week ago, something started messing with my mouse on my laptop. Right clicks, left clicks, opening up files, etc. It then got worse. It would open up a web page's source code and making changes within the coding. It messes with the volume while trying to watch a movie, and seems to be click happy. I've installed and run the...

"es": Realizar fuzzing de diferentes códigos licencia GPL o AGPL escritos en distintos lenguajes. 1. oscommerce GPL php 2. KonaKart LGPL java 3. zen cart GPL php 4. spree BSD ruby 5. Apache OFBiz Apache java 6. ce phoenix GPL php

Recently, I have been researching open source container security related tools and found many excellent projects include trivy, anchor, etc., which have done a good job in vulnerability detection; while there are not many projects focusing on other security detection. So I am more interested in Chaitin's open-source inquiring container security...

Hello! I'm running two VPSs and both of them are under TOR. I already have good security and safety, but I think I need more. Preferably, I'd like to put a secondary encryption using a technology/dictionary known only by me. Like, how could I make this secondary encryption only in the databases without interfering with the LAMP packages?...

We are getting written and spoken message (saying it is a critical alert from Microsoft) with a foreign accent saying that our computer is infected with pornographic spyware and riskware and our credit card, financial data, Facebook and email logins will all be compromised if we close our computer and don't call an 888 number within 5 minutes. we...

Hey, we need to implement license protection for a .NET program. I did a quick search on google and came across a few companies. We downloaded Quick License Manager by Soraco and it seems to fit the bill. Does anyone have any experience with Quick License Manager and Soraco ( https://soraco.co )

This works: Compile C++ Code with STATIC LINKING without a dependency on any exterior MSVCR80.dll (or other versions of MSVCxxx.dll's). Some history: I was compiling a C++11 program and I put too many items into a vector array and I got an error message: Microsoft Visual C++ Runtime Library Error. I do not have MS VC++ installed on my...

Hi, I am trying to verify a deb package using OpenSSL C++. The signature was generated using the following Command: openssl dgst -sign privatekey.pem -keyform PEM -sha256 -out signaturefile.sign -binary package.deb I am receiving signature in base64 encoding. Can please someone show me how to do it. Also how to convert base64 encoding to...

WMI reverse Asynchronous request for security, If a WMI data request, for data via a remote computer or server, is made to send the data in it's small packets in reverse, meaning that the remote computer reads the WMI data local to itself in reverse by sending that data as it gets it (in reverse), is that more secure than the standard WMI...

WMI security question - Synchronous vs Asynchronous, I think that this seems to be the way this works: Synchronously gets the data with a single returned data set. Aynchronously gets the data with multiple returned small data sets to be combined by the WMI into a resultant returned data set. Is using WMI to get local data...

In Hotmail it keeps sending emails headed up "Something went wrong. How do I remove it?

What are the latest versions of browsers that do not have "call home" built in? I have heard that the latest versions of Firefox call home with some information sometimes without asking or notifying the user. I have no interest in discussing why it calls home or what it reports. I am just asking what is the latest (or last) version of any web...

If there’s one thing that unites development teams big and small — besides open source software — it’s fear and loathing of patent trolls. Every once in awhile, a story of a multi-multimillion dollar patent infringement lawsuit will hit the news, and send a collective shiver down everyone’s spine. From the youngest of software development...

Ok, I have found some, but instead of spending months hunting through the waste of Google advertising and Google misinterpretations of requests, I am asking here. I have 3ds Max 2.5 and I have Autodesk 3ds Max 8, and maybe I might get some in between. Which websites have .MAX files that are listed for compatibility with the versions of 3ds...

Which versions of 3ds Max do not require a hardware dongle or a recurring rental? I learned and created animations with 3DStudioMax 2.5 years ago. I still have the original disk. I still have the original hardware security dongle. It still works. I recently (year 2019 AD) saw in Walmart a computer (on their shelf) that it would work on! It...

NT 4.0 (set up correctly) has it ever been hacked from the outside. I do NOT mean from someone in the office with direct access to it. I mean from an outside line, hard-wired or wireless. Some time has passed. Over the years a lot of advertising has proclaimed vaguely that anything less than the latest operating system by Microsoft is in...