Cloud Security

2015 Microsoft Windows vulnerability report      This article mainly analyzes the new security protection mechanisms or functions of Microsoft, Google, and other companies in 2015. In fact, in the previous year, Windows exploitation in 2014, we also

OpenSSL high-risk vulnerability allows attackers to decrypt HTTPS traffic OpenSSL maintainer fixes a high-risk vulnerability that allows attackers to obtain keys to decrypt encrypted traffic such as HTTPS. Although the potential impact of the

Concepts about RSA, public key, private key, encryption, and signaturePreface As a programmer, I often hear such words as encryption and decryption. Asymmetric encryption is widely used. This article does not describe the principles of encryption

How many insecure factors does a closed-circuit television probe have?     Closed-circuit television probes are everywhere in our lives. A recent survey estimates that about 1.85 million of surveillance cameras are in the UK, most of which are in

Siteserver has an SQL injection vulnerability in the spatial module. An injection vulnerability exists in the space module.SQL Injection Vulnerability

Glibc CVE-2015-7547 overflow vulnerability allows you to directly obtain a large number of host privileges in batches Google's security research team disclosed the glibc getaddrinfo overflow vulnerability. Almost all popular Linux Enterprise and

Downloading a weak password from a core operating system of yuantong to any file Downloading a weak password from a core operating system of yuantong to any file Http://jingang.yto56.com.cn/exptrack/logout.actionYuantong account: 00019484Password:

WebDAV Local Elevation of Privilege Vulnerability (CVE-2016-0051) POC & EXP Vulnerability Information This vulnerability exists in Microsoft Web Distributed creation and Version Management (WebDAV). If the Microsoft Web Distributed creation and

Arbitrary File Download from a substation in Sina Arbitrary File Download from a substation in Sina When testing Sina Weibo, a website was found along with the band. Many code files can be downloaded in combination with path

Leakage of sensitive information in multiple parts of the giant's Network (game source code + game documentation + website background + official forum + beauty baby certification) Leakage of sensitive information in multiple parts of the giant's

A large number of users in the giant's network can log on to multiple systems with their default passwords A large number of users in the giant's network can log on to multiple systems with their default passwords Http://wooyun.org/bugs/wooyun-2010-0

A weak password in haidilao background causes Getshell to involve full-site user data with a password. A weak password in haidilao background causes Getshell to involve full-site user data with a password. Haidilao forum administrator Weak Password 

Phpcms stored XSS (demo + local demo) Detailed description: Demo + local demoThere is an XSS address in the Email address of my document on the merchant information in the business center (this sentence is a detour ..), It is a problem that the

Let's Encrypt recently popular free SSL tutorials In February October 2015, Weibo accidentally saw Let's Encrypt release the beta version. This is undoubtedly a major news for the coders who have been abused by https. Let's Encrypt stands out under

Fragment of passive Scanning0x00 Introduction Distributed scanning has been written by many people, for example: Sqli plug-in of burp Matt's predecessor http://zone.wooyun.org/content/24172 Pig's predecessor's

Green ant logistics platform main site SQL Injection Vulnerability Green ant logistics platform (SQL injection) POST /road/28373-39351/index.html HTTP/1.1Content-Length: 3119Content-Type: application/x-www-form-urlencodedX-Requested-With:

Discuz! Conditional storage xss and ssrf File source \ function \ function_discuzcode.phpfunction discuzcodeIf (! Defined ('in _ mobile ')){If (strpos ($ msglower, '[/media]')! = FALSE ){$ Message = preg_replace ("/\ [media = ([\ w,] +) \] \ s * ([^

Mitm attack-Cookie Eruption 0x00 Preface Share the man-in-the-middle attack posture and try again and again. It was originally an old article, but it was too long-winded. I will repeat it in concise words today.0x01 Principle Traditional cookie

There is no need to log on to SQL injection in the Kai Lai OA system (with many cases) No Logon required Kai Lai technology OA system:Http://www.qioa.cn/product/xsd.htmlCustomer case:It affects many government and enterprise customers, but the case

Webshell-Part1 & Part20x00 Preface As we all know, every moment, web servers in the world are being attacked by thousands of malicious requests, and their attack forms are also different. Today, I am studying one of the following types: