Cloud Security

Ruby Framework used for penetration testing WordPress: WordPress Exploit Framework Parsing This Ruby framework contains some modules that can penetration test WordPress websites and systems. Users can also develop their own modules to expand their

Linux kernel Privilege Escalation Vulnerability (CVE-2016-3157)Linux kernel Privilege Escalation Vulnerability (CVE-2016-3157) Release date:Updated on:Affected Systems: Linux kernel Description: CVE (CAN) ID: CVE-2016-3157Linux Kernel is the

Siemens APOGEE Insight information leakage (CVE-2016-3155)Siemens APOGEE Insight information leakage (CVE-2016-3155) Release date:Updated on:Affected Systems: Siemens APOGEE Insight Description: CVE (CAN) ID: CVE-2016-3155APOGEE Insight is a

Up to 95% of HTTPS links can be hijacked by hackers It is easier to support HSTS than you think. Because the server administrator fails to correctly set HTTP Strict Transport Security (HSTS), a large amount of HTTPS traffic can be easily hijacked

Introduction to mobile APP attacks Attacks on mobile apps are nothing new, and there are many tutorials on the Internet. However, many penetration testers still cannot classify their attack technologies, or even do poorly. Mobile app attacks are

PhpMyAdmin man-in-the-middle attack Vulnerability (CVE-2016-2562)PhpMyAdmin man-in-the-middle attack Vulnerability (CVE-2016-2562) Release date:Updated on:Affected Systems: PhpMyAdmin Description: CVE (CAN) ID: CVE-2016-2562Phpmyadmin is an

Wireshark DNP3 parser DoS Vulnerability (CVE-2016-2523)Wireshark DNP3 parser DoS Vulnerability (CVE-2016-2523) Release date:Updated on:Affected Systems: Wireshark Wireshark 2.0.x Description: CVE (CAN) ID: CVE-2016-2523Wireshark is the most

Attackers attacked the site by Angler Exploit.     In some well-known news websites, entertainment portal websites, and political comment websites, a large number of netizens have been attacked by malicious advertisements by Angler Exploit. This

The hacker virus will be poisoned just after the computer is turned on! In recent years, hackers have been cracking down their minds to make it easy and quick for users to infect computer viruses! Not only do you have to be proficient in all kinds

The qianyuan electronic safe deposit box was opened in this way (the security of the electronic safe deposit box)  With the popularization of electronic safes, more and more people have begun to pay attention to the security of electronic safes.

Be careful when you have ears: The project code for stealing target information using electromagnetic radiation is open-source  Recently, a computer technical expert William Entriken invented a new method that allows computers to send wireless

11. User ID card information traversal and password reset due to a vulnerability in the battle platform Hi demon APP:Log on and capture packets. The following interfaces return the user ID card information, mobile phone number, and so on:Http://api.

Pseudo-static SQL injection (with verification script) exists in a station in flush) ... Injection point: http://data.10jqka.com.cn/ifyyb/yybstockxt/code/600811/date/1 *The asterisk (*) Position of the injection parameter.The space is filtered and

M1905 zabbix injection exists in a website of movie network, leading to background Command Execution Http: // 118.145.26.196/zabbix/index. phpThe zabbix version is too low. I remember there was a front-end injection hole in the past, so I typed it

Sensitive Information Leakage of bubble network requires password modification as soon as possible (almost all servers, databases, and backend servers are

General-purpose command execution in the security management system of the central soft unified terminal (Java deserialization case) "United Endpoint Management (UEM)", with its brand new security concept, powerful function system, and sound

The best East Main Site has SQL injection (the injection parameter ticket contains 230 million + User Data/cross-42 databases)   Target: www.veryeast.cnSQL Injection exists in the following areas: (injection parameter ticket, error injection,

You can view the content of the private letter of any beauty broadcaster on Yingke live. Bored to watch the beauty broadcaster on the Yingke app, and found the secret of the broadcaster... Www. inke. TV is afraid of a duplicate name first.  First,

Analysis of 10 engineering hacking techniques that surprise you Kevin, the world's first hacker? In the art of deception, Mitnick mentioned that human factors are the weakness of security. Many companies invest heavily in information security, but

Rowhammer attack technology can be used to attack some DDR4 Memory Modules Recently, security researchers have demonstrated a new Rowhammer attack that can be used to attack some DDR4 memory modules.Rowhammer attacks have a wide impactRowhammer