Cloud Security

Analysis of assembly code debugging under X86-64 This article should be the most basic thing for some big guys who often use gdb, but here I just want to share some basic tools or other useful things I have found. If you are converting from gdb to

Oracle Sun Solaris Information Leakage Vulnerability (CVE-2016-0618)Oracle Sun Solaris Information Leakage Vulnerability (CVE-2016-0618) Release date:Updated on:Affected Systems: Oracle Sun Solaris 11 Description: CVE (CAN) ID:

Deep Analysis of Microsoft Office RTF File Stack Overflow Vulnerability (CVE-2016-0010) 0 × 01 SummaryIn this month's Microsoft Tuesday patch, Microsoft fixed 3 Office vulnerability MS16-004. This vulnerability is a heap overflow vulnerability

Hpe ucmdb Browser Vulnerability (CVE-2015-6862)Hpe ucmdb Browser Vulnerability (CVE-2015-6862) Release date:Updated on:Affected Systems: Hp hpe ucmdb Browser (4.02) Description: CVE (CAN) ID: CVE-2015-6862Hpe ucmdb Browser is a lightweight Web

FireBird DoS Vulnerability (CVE-2016-1569)FireBird DoS Vulnerability (CVE-2016-1569) Release date:Updated on:Affected Systems: Firebird 2.5.5 Description: CVE (CAN) ID: CVE-2016-1569Firebird is a cross-platform SQL database system.FireBird 2.5.

COFCO buy my Web OA system getshell roaming Intranet People planted trees and enjoying the cold The verification code can be bypassed by a vulnerability in the A8v5 system.  Brute force cracking successful  You can see many internal information

Analysis of PayPal Remote Command Execution Vulnerability In December 2015, the authorA SubstationJava deserialization vulnerability that can remotely execute arbitrary shell commands is found, and the product database of PayPal can be affected. I

An injection of a Chinese civil aviation product found in the official APP of okai Aviation SQL Injection for APP security Objective: To launch okai official APPCheck that SQL Injection exists in the following places: (userName in POST)  POST https:/

58. A system fell from Audit Account to Regional Manager account (numerous information leaks) Zhuang Zai I dasmaI am here in the world of worldly fireworks, and I love the floating city of time reflection. Different from this: WooYun: A system

An SQL injection vulnerability exists in a sub-station of happy Tao Network (more than 8 million user information) The SQL injection of a website on happy tao.com involves more than 8 million users. Http://huan.letao.com/wap/app_download.aspx? Op =

Pseudo static SQL injection (bypassing filtering) on a bus stop) Pseudo static SQL injection (bypassing filtering) on a bus stop) URL: http://speed.tgbus.com/tgdb/car/202.shtmlPOC http://speed.tgbus.com/tgdb/car/202 xor sleep(52.16.shtml because of

A weak password \ SQL injection vulnerability in a website in Digital China Getshell A weak password \ SQL injection vulnerability in a website in Digital China Getshell Vulnerability exists URL: http://dckf.digitalchina.com first, I see that a

Some SQL injections at Century jiayuan involve millions of members. An SQL injection at Century jiayuan, involving millions of members Injection point: http://vip.jiayuan.com/broker/?tag=1 Database:  Database: crm  +--------------------------------

SQL injection vulnerability in a third-party system The password in the user table is sha1 encrypted and cannot be cracked,A system injection vulnerability in the third party of the Chinese section. Degree of hazard see: WooYun-2015-120533SQL

A large number of security and monitoring devices in Yushi, Zhejiang Province have general design defects (root permission) Multiple models are involved Involved in model ISC3500-EL, ISC2500-S and so on, the specific manufacturer should be more

A System Defect in China Life can cause leakage of user records in the system Design defects China Life Insurance customer policy Inquiry System  **. **: 8443/cusQuery/indexlis. jsp  Baidu to a page **. **:

Unauthorized access to a partner APP system causes the server to fall into the database, involving million users I want to brush a wave of RANK -.- Unauthorized access to redis causes SSH Authentication-free logon.Root @ kali :~ /. Ssh # ssh 121.43.1

Kali Information Collection ~★6. Dmitry: Collect SummaryOverview: DMitry (Deepmagic Information Gathering Tool) is an integrated Information collection Tool. It can be used to collect the following information: 1. Port Scanning 2. whois Host IP

Is there a way to steal traffic for free? Yesterday, the major vulnerabilities of White Hat hackers "very white" were announced on the red/Black Alliance's vulnerability platform. Hackers can use the operator's traffic without limits in a simple

Reset Password for any user on the home site The password is reset on the master site, and the SMS verification code is not verified.Can be reset at will First open the Home Delivery WebsiteClick forgot password in the upper-right corner.  Go to