Cloud Security

Analysis of malicious samples on Controlled Terminals of a botnet 0x00 intro Recently, the "360-eye threat awareness system", which is deployed on the 360 cloud platform (https://cloud.360.cn), found that the system warns of abnormal traffic on a

WinRAR file-execution Privilege Escalation Vulnerability (CVE-2015-5663)WinRAR file-execution Privilege Escalation Vulnerability (CVE-2015-5663) Release date:Updated on:Affected Systems: WinRar Description: CVE (CAN) ID: CVE-2015-5663WinRAR

Samba smbd vfs. c access Restriction Bypass Vulnerability (CVE-2015-5252)Samba smbd vfs. c access Restriction Bypass Vulnerability (CVE-2015-5252) Release date:Updated on:Affected Systems: Samba Samba 4.x-4.1.22Samba Samba 4.3.x-4.3.3Samba Samba 4.2.

Belkin N600 Elevation of Privilege Vulnerability (CVE-2015-5988)Belkin N600 Elevation of Privilege Vulnerability (CVE-2015-5988) Release date:Updated on:Affected Systems: Belkin F9K1102 2 2.10.17 Description: CVE (CAN) ID: CVE-2015-5988Belkin

A System Defect in huatai insurance allows you to directly operate on the database to add, delete, and modify data (you do not need to log on to execute any SQL statement) Design defects Http: // 219.143.162.218/htwx/    POST http://219.143.162.218/

Getshell of a Huawei website Shell Career-whrc.w.wei.com/pages/handle/register.handle.phpFirst, register a number and then register it again.If a single quotation mark is added to the user name, the registration fails.It should be

Multiple SQL injections from a substation in Huawei A sub-station of Huawei, Oracle Database Http://consumer.huawei.com/support/services/service/tcsReservation/findReservationByReservationNo? Jsonp = jquery1910201111365258694_1448884905233 &

A major security vulnerability exists in NetEase enterprise mail (such as Yunxiao Street/Hunan Satellite TV) Many corporate post offices have chosen Netease enterprise mail. All of the three companies on Netease's enterprise mail platform,

Look at my amazing method, shell, COFCO, a system, a site COFCO is a big vendor. The attitude of the previous vulnerability is awesome. Actually, I feel like a big vendor doesn't care about this rank. Hey, but I do. Please ask 20 rank. Thank

58. Arbitrary user hijacking and logon caused by improper design of an app in the same city 58. An app in the same city is improperly designed, resulting in hijacking of arbitrary users 58 The logon function of the Home Express app (ios) is

A system design defect in Suzhou tietong (four systems, nine regions, hundreds of OLT devices exposed \ tens of thousands of users are expected to be affected) This wonderful defect! **.**.**.**:9000 Contains four systems:  Suzhou tietong telephone

Man-in-the-middle attack html Injection  0 × 00 orders The article I wrote a long time ago is now shared. I declare in advance that I am a cool dish, so the analysis of leaked data will inevitably be negligent or wrong. I hope you will be more

MEDCIN Engine Vulnerability exploitation details Popular Science: The MEDCIN engine is an electronic medical record system for doctors and nurses.A few months ago, I found a vulnerability in the earlier version of the MEDCIN engine's security

An SQL Injection Vulnerability (leakage of car owner and dealer Information) Yimao Automotive Network is a company dedicated to the sales and consumption of new cars (including parallel imported cars, it also aims to solve the three major puzzles of

Exploitation of File Inclusion vulnerabilities in the DVWA Series After understanding the principles of file inclusion, we will go to DVWA and select low-level file inclusion. A prompt is displayed on the page. You can edit the page parameter in

File Inclusion Vulnerability Analysis for DVWA Series 14 Program developers usually write reusable functions into a single file. When using some functions, they call this file directly without writing it again, this process of calling a file is

The SQL injection vulnerability exists in the official Apsara stack APP (67 databases and verification scripts are supported) Ask SQLMAP to bypass the if-filtered tamper ~ Target: Official api.fengniao.com)The SQL injection vulnerability exists in

Hejia's website does not fix the problem and still uses SQL injection. RT URL: http://life.ufh.com.cn/guidelist.php? G_id = 10I mentioned one before and said that the vulnerability has been fixed.Vendor reply:The official hospital homepage.

Social engineering database applications implemented using Whoosh     When organizing the computer, I found a social engineering library written in Python. I used Whoosh to create an index for the social engineering library file based on the line

Browser web SQL Injection Vulnerability (involving nearly 40 million users)   Http://denglish.e21.cn/diag/user_myclazz.do;jsessionid=D34619F852B1EF15E0EB4890AA68A335? PageNum = 1 & pageRows = 5 & grade = 0 & bjtype = commonGrade parameter Injection