Cloud Security

CVE-2014-6271 Data Summary Author: shawn0x00 what is BASH Bourne Again Shell (BASH) is the most popular SHELL implementation on GNU/Linux. It was born in 1980, after decades of evolution, a simple terminal command line interpreter has evolved into

Malicious attack on IE browser using MS14-035 This vulnerability can cause the Internet Explorer to crash. The versions involved include ie8, 9, and 10. Microsoft released an update Patch on March 14, June 10,So now we can only attack ie browsers

CVE2014-6287 Analysis Report0x00 Preface In wooyun zone, I saw the article HFS 2.3x remote command execution (the last day of hacker capture). Previously, I only analyzed binary vulnerabilities. This command injection vulnerability was the first

4G Browser Remote Code Execution Vulnerability 4G Browser: http://4g.roboo.com/download dex2jar and jd-guiSearch addJavascriptInterface   Navigator interface VulnerabilityConstruct a Write File + pop-up window Exp:  test Pop-up

Gitlab-shell is affected by Bash CVE-2014-6271 Vulnerability Today, US-CERT announced a serious Bash Security Vulnerability (CVE-2014-6271) that also affects the OpenSSH daemon. The default git account of the Gitlab server uses Bash to execute

Bash 3.0-4.3 Command Execution Vulnerability Analysis (by @ lulu4nx) Reports on this vulnerability: Http://www.freebuf.com/news/44805.html Http://www.csoonline.com/article/2687265/application-security/remote-exploit-in-bash-cve-2014-6271.html

Defense methods for cc and capturingI have been crawled by an SB on my personal website recently. I haven't found it before. It has been crawling for several months. The reason is that SB is holding a locomotive and thinks that it is no longer

Old bird teaches you how to be a good hacker Some may often ask me: "How can I get my first penetration test?" Like most other types of work, the company hopes that employees can bring substantial value to the company as quickly as possible, this

Tccms SQL Injection #2 The constant is not defined. View/system/core/controller. class. php  private function forceAttack() { $attack = M('attack'); if (Config::get("blackcheck") == 1 && !defined('IN_ADMIN') && $_GET['ac'] !=

Horizontal permission of a pharmaceutical house network APP When saving the address modification screen, you can change the userid to the ID of another user and then save the address to another user. In addition, CSRF exists in this screen. You

Where does the destoon storage xss address? The member sends a letter and uploads an attachment. Files in swf format can be uploaded, The label is not filtered.We construct a malicious swf. For example  Upload the attachment f12 and view the

Cmseasy storage XSS (ignore 360 without logon) Cmseasy allows non-logged-on users to reply to the bbs reply, but the user name is retrieved from the COOKIE, resulting in security problems: /Bbs/ajax. php  userid; $ data ['addtime'] = mktime (); $

Arbitrary File Deletion caused by Phpyun design defects can cause reinstallation of getshell or injection. Design defects can cause deletion of arbitrary files and lock, which can be directly reinstalled to achieve getshell.Or you can delete an

CuteEditor for classic asp Vulnerability The CuteEditor for classic asp Vulnerability was accidentally discovered. The editor used a small amount and was directly released.Any directory and file:   GET

Other user password vulnerabilities in the host room Modify others' passwordsFirst, we need to register an account on the host and bind the mailbox Then, go to the homepage and find the forgot password feature.  Enter the registered account

Three SQL injections in a general enterprise OA system (No Logon required) @ What_news WooYun: A General Enterprise Edition OA system SQL Injection package, said the injection is almost finished, but there is actually a fish in the net, haha, let

Apache Mina Development Manual II Apache Mina Development Manual II Iv. NIO Overview Nio api is introduced in Java 1.4. NIO means non-blocking I/O communication.Knowing that Mina's NIO was developed based on NIO-1, and that the library of NIO-2 was

A school management system vulnerability package (including XSS storage-SQL Injection Vulnerabilities) "School website system" This is a keyword. You can add. Or not! Baidu found   Okay .. Let's do this first... Get injection exists? [root@Hacker~]#

Phpyun injection bypass 360 Protection Check member usage during registration Model \ register. class. php23 rows  Function ajax_reg_action () {$ post = array_keys ($ _ POST); $ key_name = $ post [0]; if ($ key_name = "username ") {$ username = @

74cms (20140709) the latest version of the second injection 74cms V3.4.20140709Instead of modifying the vulnerability code, you can modify the filter function.Although the filtering Code cannot be bypassed .. However, the data can still be found.On