Other

Dell R730 Upgrade the latest version of BIOS

Recently, I saw that the BIOS version of my R730 server is 2.15.0. Decide to upgrade the BIOS version. The process is as follows: 0. Determine your own BIOS version; 1. First, go to the Dell server BISO download page, find other available versions, and select a version higher than your own to download. 2. Select to upload a higher version of BIOS; 3. Select the next boot time to boot; 4. Confirm the information in the operation queue
read the whole passage
Other

WordPress Arbitrary File Deletion Vulnerability Repair

Recently RIPS revealed that Wordpress up to 4.9.6 still has an arbitrary file deletion vulnerability. Wordpress sites with author and similar permissions are threatened by this vulnerability. An attacker can cause arbitrary file deletion by constructing the 'thumb' path of an attachment. Serious consequences will lead to the attacker obtaining the site administrator's permission to control the server. Repair method: (post. php is repaired) [crayon-664fe210a8d5f354062110/] Reference document: https://blog.ripstech.com/2018/wordpress-file-delete-to-code-execution/?spm=5176.2020520154.sas.162.215f79d6cb4YoT
read the whole passage
Other

WordPress SSRF attack repair scheme

The wp_http_validate_url function in the wordpress/wp includes/http.php file does not properly verify the input IP, which causes hackers to construct malformed IP like 012.10.10.10 to bypass the verification and perform SSRF. Repair method: (http. php is repaired) [crayon-664fe210a8d9b867511247/] [crayon-664fe210a8d9d81967474743/]
read the whole passage