Cloud Security

Apache Struts I18NInterceptor cross-site scripting (CVE-2016-2162)Apache Struts I18NInterceptor cross-site scripting (CVE-2016-2162) Release date:Updated on:Affected Systems: Apache Struts 2.0.0 - 2.3.24.1 Description: CVE (CAN) ID:

Up to 95% of HTTPS links can be hijacked by hackers It is easier to support HSTS than you think. Because the server administrator fails to correctly set HTTP Strict Transport Security (HSTS), a large amount of HTTPS traffic can be easily hijacked

Adobe Reader DC Remote Code Execution Vulnerability (CVE-2016-1009) (apsb16-09)Adobe Reader DC Remote Code Execution Vulnerability (CVE-2016-1009) (apsb16-09) Release date:Updated on:Affected Systems: Adobe Reader DC Adobe Reader DC Adobe Reader

More than 10 million websites using https are threatened by new decryption attacks A low-cost DROWN attack can decrypt data within several hours. This attack also works for email servers using TLS. An international research group issued a

Wireshark X.509AF parser DoS Vulnerability (CVE-2016-2524)Wireshark X.509AF parser DoS Vulnerability (CVE-2016-2524) Release date:Updated on:Affected Systems: Wireshark 2.0.x Description: CVE (CAN) ID: CVE-2016-2524Wireshark is the most

Google Chrome post-release Reuse Vulnerability (CVE-2016-1641)Google Chrome post-release Reuse Vulnerability (CVE-2016-1641) Release date:Updated on:Affected Systems: Google Chrome Description: CVE (CAN) ID: CVE-2016-1641Google Chrome is a

Simply bypassing Chome password to view the logic and how to view the Saved Password in the browser View logic:When you want to view the password saved in Chrome, click it to display a dialog box asking you to enter the Windows Password to verify

The qianyuan electronic safe deposit box was opened in this way (the security of the electronic safe deposit box)  With the popularization of electronic safes, more and more people have begun to pay attention to the security of electronic safes.

Sina api.sina.cn domain name SQL injection involves 78 databases to be filtered Sina api.sina.cn domain name has SQL injection, involving 78 databases, user data, chat information, server configuration, transaction information, and many other

The social worker obtains the OA user name and password of all employees in a medical service. This penetration is completely technical and relies solely on social engineering. First, I saw a group announcement saying that the OA password and user

Analysis on arbitrary JS code execution beyond the XSS character limit I. Summary Some XSS vulnerabilities cannot be effectively exploited due to a limited number of characters. Only one dialog box can be displayed for YY. This article mainly

If the account system of a system in AVIC certificate is inappropriate, you can access the Intranet (you need to change the password) If the account system of a system in AVIC certificate is inappropriate, you can access the Intranet (OA

Sensitive Information Leakage of bubble network requires password modification as soon as possible (almost all servers, databases, and backend servers are

A station in autohome.com has SQL injection to be filtered out. An Alibaba Cloud station has SQL Injection I wanted to come up with a verification script. I 'd like to give the result of the time

A sensitive system in Futian has a high-risk Oracle Injection Vulnerability (DBA permission) This vulnerability is absolutely critical to sensitive systems and oracle SQL injection.20 rankGo to the homepage Vulnerability address: http://fs.foton.com.

Authentication mechanism must be added for full-site source code leakage in the Shui Mu community (indirect secondary code audit is allowed) Full-site source code leakage in the Shui Mu community (indirect secondary code audit can expand the

Improper configuration of a certain area of huiping network leads to leakage of all hotel account and password (involving nearly hotels in China) This directly results in the disclosure of all the hotel account and password, involving the disclosure

A codoon website needs to be filtered for SQL Injection It's a bit cold ~ Find a hole to play ~ The domain name of codoy should be www2.kugou.kugou.com, but it is obvious that the domain name is cname on the CDN node.  As a result, the ip address

Mysql injection vulnerability in a website in Rong 360 RT, Chinese New Year. Enjoy a red envelope RTThe following is an integrated app designed to study logical vulnerabilities. injection was found during the test... Mobile Packet

P2p financial security: xinhehui has an influence on java Reverse Sequence command execution on the Intranet. RT Java anti-sequential vulnerability boom is still not over. In bi.xinhehui.com: 9704/115. 231.105.61: 9704, we found that weblogic has