Cloud Security

Use of FreeBSD Remote DoS attack analysis (CVE-2016-1879)   FreeBSD team announced a serious vulnerability in their operating systems. Hackers can exploit this vulnerability to launch DoS attacks, escalate privileges or steal sensitive system

Lan sharing permission settings: xp has no permission to access win7 share, and win7 has no permission to access xpLan sharing permission settings have always been one of the network skills that administrators must master. However, because the

Advantech WebAccess Buffer Overflow Vulnerability (CVE-2016-0860)Advantech WebAccess Buffer Overflow Vulnerability (CVE-2016-0860) Release date:Updated on:Affected Systems: Advantech WebAccess Description: CVE (CAN) ID: CVE-2016-0860WebAccess

Advantech WebAccess File Upload Vulnerability (CVE-2016-0854)Advantech WebAccess File Upload Vulnerability (CVE-2016-0854) Release date:Updated on:Affected Systems: Advantech WebAccess Description: CVE (CAN) ID: CVE-2016-0854WebAccess

Oracle Sun Solaris Information Leakage Vulnerability (CVE-2016-0618)Oracle Sun Solaris Information Leakage Vulnerability (CVE-2016-0618) Release date:Updated on:Affected Systems: Oracle Sun Solaris 11 Description: CVE (CAN) ID:

Linux new Trojan Ekocms exposure: screenshots taken every 30 seconds Dr. Web, a Russian software vendor, recently discovered the Linux platform's new Trojan Linux. Ekocms.1. From the trojan samples, the Trojan can take screenshots and record audio

A vulnerability in youxin can cause Intranet roaming (involving a large amount of internal Sensitive Information) It only proves that the vulnerability exists.Are you still recruiting security personnel? There are many problems. There are no

Jiuyou pseudo-static SQL injection involves 6.43 million user account and password information As soon as nine games are mentioned, my heart will hum: the vast world is my love ......    Proof of vulnerability: Web application technology: NginxBack-

SQL Injection exists somewhere in Sina financial Rt affects user data Injection point: http://vip.stock.finance.sina.com.cn/fund_center/data/jsonp.php/funds_smsy/PEFundService.getHowBuyData? Page = 1 & num = 10 & sort = jjjz * & asc = 0 & ccode = &

Master station SQL injection of gionee OS (with py script) ~~~~~ Injection Point http://www.amigo.cn/ami_stat/ami_stat.php? Val2 = undefined & val1 = 111 * & type = searchThe injection parameter is val1.Normal detection fails. You need to use

KesionCMS ASP edition SQL Injection Search Injection Obviously one injection, but it seems that the injection needs to be closed. First, the injection is submitted to prove that the injection is closed and handed over to

A sub-station of Changan Mazda has a vulnerability and can be executed with commands. A sub-station of Changan Mazda has a vulnerability and can be executed with commands. The website was previously exposed to the JAVA deserialization

A P2P website leaks a large amount of sensitive user information, which can be used by hackers. A P2P website leaks a large amount of sensitive user information, which can be used by hackers.   A large amount of sensitive user information is leaked,

Chrome malicious extensions can monitor users' online behavior Recently, researchers from security company Malwarebytes have investigated a malicious Chrome extension.Malware infected usersThis malicious Chrome extension monitors users' online

Getshell can be used for a substation on the 19th floor. Getshell can be used for a substation on the 19th floor. It has been more than a year since the last Intranet roaming on the 19th floor. Some of them opened the dusty notepad and suddenly

A weak password in wasu digital has the risk of data leakage (involving more than 420 million user data) A weak password in wasu digital has the risk of data leakage. Recently captured wasu digital TV source accidentally found apk access to this

XSS: insecure EZDATA script At the time of writing this article, I do not know who the script is, but many websites have this vulnerability. In this article, I will analyze the insecure script "EZDATA. I found this script when I browsed the Alexa

RWMC: A Windows credential Extraction Tool Using PowerShell RWMC (Reveal Windows Memory Credentials) is a Windows PowerShell script that extracts Windows creden, by using it and the CDB command line option (Windows debugger). In addition, it can be

SQL Injection (including 820 million + User Data) exists in the main site and sub-stations of retao www) Objective: www.letao.comCheck that SQL Injection exists in the following places: (injection parameter cid, Stacked

An SQL injection vulnerability exists in a sub-station of happy Tao Network (more than 8 million user information) The SQL injection of a website on happy tao.com involves more than 8 million users. Http://huan.letao.com/wap/app_download.aspx? Op =