Cloud Security

I heard that plug-ins can also be used to steal train tickets? Don't tease me! | Focus on hackers and geeks On April 9, December 8, train tickets for the Spring Festival began to be pre-sold. A large number of "city migratory birds" flocked to 12306

File Upload blacklist verification Bypass For example, some common script names such as asp php jsp cannot be uploaded, below are some of my summary of the bypass MethodsShtml// Can be used to read files// Can be used to execute commandsIis

Tami financial information leakage (up to 0.2 billion RMB) Involving 0.2 billion RMB, 20 points is definitely not enough!Scared to death, login a 100 millionDetailed description: https://github.com/superman66/ChiQiFound/blob/0f45e27f1309e668417958357

Thoughts on vulnerabilities caused by a Python command 0x00 cause Recently, when testing a project, you have no intention of discovering that you can directly run a Python command on the client machine to execute the Python script on the server.

Java deserialization vulnerability execution command echo implementation and Exploit download Some of the technologies and tools mentioned in this article may be offensive and only for safe learning and teaching purposes. Illegal use is prohibited! 0

Bilibili Intranet roaming: redis obtains the root permission I pretended to listen to a port on VPS, and then suddenly rebounded to a shell. Well, I pretend I don't know which month a crontab backdoor brought me into Bilibili's intranet again.There

AD Alliance turned into Trojan Alliance HackingTeam vulnerability weapons attacked millions of netizens 0x00 In early November, the 360 Internet Security Center monitored a spike in the interception volume of a downloading trojan named

Defense bypass caused by misuse of ELE. Me cryptography talking about Android cryptography Vulnerabilities The misuse of cryptography is a big problem in apps. Almost all apk verification algorithms can be simulated.Ele. Me's algorithm is robust and

Weak background passwords of a game in (various pictures and classification information are included) Podoano ** \ cangjing * \ yanze ** \ jizawa ** \ xiaoze ** and other beautiful pictures, sent 5wb to the communityDetailed description:

Information Leakage of auspicious aviation big wave personnel (domain password + work system password + new mailbox password) I saw your internal weak password modification email ~ Just a reminder is not mandatory... =. =Detailed description: [Email

Password retrieval vulnerability in the monitoring eye Network Camera (any user password can be reset \ user privacy is involved) Xmeye downloads the first web camera mobile phone viewing software, and the password retrieval vulnerability exists,

58. One storage-type XSS product page is released in the same city When my wife was a child, she was always in a car. She didn't take a train. She was lying in bed tonight and suddenly said, "How far will the car be running when I get off the train

Discuz! The stored xss vulnerability exists in the body of the latest post. The latest official x2.5 and x3.x are affected. I heard that the vulnerability collection will become moldy for too long. You need to enable the multimedia code function

The SQL blind injection vulnerability exists somewhere on the main site of a Provincial Branch of China Unicom. RtDetailed description: The post SQL blind injection vulnerability exists in the following link: Proof of vulnerability: Run it with

SQL Injection for a service in Beijing Hejia Hospital RTDetailed description: HTTP: // life.ufh.com.cn/list5.php? Ch = 50 & a_id = 5A_id InjectionThe permission settings and password strength are both good and fail to be further explored.Proof of

SQL Injection for a website (a large number of Personal Data leaks \ free-of-charge items \ arbitrary item modification) SQL injection can expose a large number of members to submit their personal information and administrative staff to improve

SQL Injection of an International Hotel Group system (leaked name/ID card/phone/address/internal financial information/position/text message/Contract/employee information/partner Information) It took four days to prove its hazard .. Before running,

51CTO technical website has SQL Injection Vulnerability Detailed description: POST/salary/show. php HTTP/1.1Content-Length: Your content-type: application/x-www-form-urlencodedX-Requested-With: XMLHttpRequestReferer: http://fellow.51cto.comHost:

SQL Injection exists in a clothing Management System & unrestricted Getshel (no DBA permission required) Detailed description: F22 clothing Management SoftwareOne injection, without the DBA permission POST / HTTP/1.1Host:

I hijack your dns This article divides Dns into two types: host or embedded device dns, and website domain name dns, to describe the harm caused by the fall of dns.I. vrodns dns hijackingThe dns of your local network connection is obtained through