Cloud Security

WordPress Contus Video Gallery plugin SQL Injection VulnerabilityWordPress Contus Video Gallery plugin SQL Injection Vulnerability Release date:Updated on:Affected Systems: WordPress Contus Video Gallery Description: WordPress Contus Video

Cisco Finesse Server XSS Vulnerability (CVE-2015-0714)Cisco Finesse Server XSS Vulnerability (CVE-2015-0714) Release date:Updated on:Affected Systems: Cisco Finesse Server 11.0 (1)Cisco Finesse Server 10.6 (1)Cisco Finesse Server 10.5 (1)Cisco

Use Teensy to simulate the e-mapreduce x card and crack the feasibility of the e-mapreduce X-class access control system. The previous day, Open started Teensy ++ 2.0. Therefore, we studied Teensy ++ 2.0 simulation eminix and conducted a brute-force

WordPress Cart66 Lite plug-in Security Restriction Bypass and SQL Injection Vulnerability Release date:Updated on: Affected Systems:WordPress Cart66 Lite 1.5.3Description:Cart66 Lite plug-in WordPress's e-shopping cart plug-in. WordPress Cart66

Wireshark Netflow parser Denial of Service Vulnerability (CVE-2014-6424) Release date:Updated on: Affected Systems:Wireshark 1.12.0Description:Bugtraq id: 69862CVE (CAN) ID: CVE-2014-6424 Wireshark is the most popular network protocol parser.

Cisco IOS IKEv2 replay security measure Bypass Vulnerability Release date:Updated on: Affected Systems:Cisco IOSDescription:--------------------------------------------------------------------------------Bugtraq id: 63426CVE (CAN) ID:

Multiple Cross-Site Scripting Vulnerabilities in phpMyAdmin Release date:Updated on: Affected Systems:PhpMyAdmin 4.xDescription:--------------------------------------------------------------------------------Bugtraq id: 69268CVE (CAN) ID: CVE-2014-52

Return-into-libc Attack and Defense This article first analyzes the principles of return-into-libc attacks, and introduces the experimental processes and results of traditional return-into-libc attacks on different platforms. Then, this article

A man's martial arts: the idea of Intranet penetration testing (2) Web penetration (previous article)Http://www.bkjia.com/Article/201412/357403.htmlDifferent, Intranet penetration requires more randomness and breakthrough, and the situation is more

Metasploit penetration test notes (intranet penetration)0x01 reverse the shellFile Generally, msfpayloadis used to generate a backdoor.exe file and upload it to the target machine for execution. You can obtain the meterpreter shell by using a local

Virus Trojan scan: Behavior Analysis of pandatv burningI. Preface To analyze the behavior of the pandatv virus, we use Process Monitor v3.10. Behavior Analysis Aims To write virus killing programs. Of course, due to various restrictions in the real

0.1 million WordPress website collapse: the malicious software SoakSoak has arrived WoRdPress is a blog platform developed in PHP. You can set up your own blog and use WordPress as a content management system (CMS. WordPress security

Three generations of "Elder elder Trojan" find the "drug lord" behind the scenes"   I. Tip of the iceberg Recently, many Android mobile phones have "inexplicably" applications such as "flashlights" and "calendar", which cannot be uninstalled without

Penetration Testing-manual vulnerability Exploitation1. experiment environment description I have introduced the installation and network configuration of the Kioptrix target in the previous article. Now let's take a look at the two necessary

Xml file security Parsing XML eXtensible Markup Language, designed for data transmission and storage. Its diverse forms 1. Document Format (OOXML, ODF, PDF, RSS, docx ...) 2. Image Format (SVG, EXIF Headers ,...) 3. configuration file (custom name,

Arbitrary user login, SQL injection, and GetShell vulnerability source code analysis of a General website management system This system is not open-source and is mostly used by colleges and universities. Let's take a look at the source code. 0x01

How can we better implement Web application penetration testing? The more enterprises rely on network communication and cloud-based data systems, the more likely they are to be attacked and damaged by external attackers. When considering the data

Web security practice (2) Analysis of http-based web architectureThe web security practice series focuses on the practical research and some programming implementation of the content of hacker exposure-web Application Security secrets and solutions (

PHPOK's latest foreground SQL Injection Vulnerability (administrator password can be obtained directly) An SQL injection vulnerability exists in a function in the front-end of the latest PHPOK version. You can use UNION injection to obtain the

Reset the password of any account on China Telecom Integrated Office Platform Http://office.189.cn/office automation-V3.0.0 Http://office.189.cn/ioop-bcs-web/sys/sys-pwd-question! Input. do password retrievalEnter a user name that can be enumerated