Cloud Security

Analysis of attacker intrusion paths traced by Webshell Not long ago, we received an emergency response task in which a group's website was planted with a backdoor. Our job was to find the attacker's intrusion path and analyze the security problems

Android LIST_POISON Security Mechanism Bypass Vulnerability (CVE-2016-0821)Android LIST_POISON Security Mechanism Bypass Vulnerability (CVE-2016-0821) Release date:Updated on:Affected Systems: Android 6.0 Description: CVE (CAN) ID: CVE-2016-082

Apache Struts I18NInterceptor cross-site scripting (CVE-2016-2162)Apache Struts I18NInterceptor cross-site scripting (CVE-2016-2162) Release date:Updated on:Affected Systems: Apache Struts 2.0.0 - 2.3.24.1 Description: CVE (CAN) ID:

FreeBSD Kernel amd64_set_ldt Heap Overflow Vulnerability (CVE-2016-1885)FreeBSD Kernel amd64_set_ldt Heap Overflow Vulnerability (CVE-2016-1885) Release date:Updated on:Affected Systems: FreeBSD Description: CVE (CAN) ID: CVE-2016-1885FreeBSD

XZERES 442SR Wind Turbine XSS Vulnerability (CVE-2016-2287)XZERES 442SR Wind Turbine XSS Vulnerability (CVE-2016-2287) Release date:Updated on:Affected Systems: XZERES 442SR Wind Turbine Description: CVE (CAN) ID: CVE-2016-2287XZERES 442SR

Analysis of some recent changes to malicious office macro attachments In the past, the office macro series of malware did not rely on office. adobe vulnerabilities were popular, perhaps because the vulnerability mining costs were rising. Today's

Adobe Digital Editions Memory Corruption Vulnerability (CVE-2016-0954)Adobe Digital Editions Memory Corruption Vulnerability (CVE-2016-0954) Release date:Updated on:Affected Systems: Adobe Digital Editions Description: CVE (CAN) ID: CVE-2016-0

Discussion on the Content of random numbers after Penetration ConceptRandom Number is the result of a special random test.Before The PassageThe Penetration Process has no bright spots. No great skill, just for fun.BeginThe target website is aspx and

Sina api.sina.cn domain name SQL injection involves 78 databases to be filtered Sina api.sina.cn domain name has SQL injection, involving 78 databases, user data, chat information, server configuration, transaction information, and many other

The social worker obtains the OA user name and password of all employees in a medical service. This penetration is completely technical and relies solely on social engineering. First, I saw a group announcement saying that the OA password and user

View my direct connection to the master site www database (github leaks 28 databases/2 million user data with a password) RT Security #1 github leakage: https://github.com/zhangxiaocenfoxmail/Python_MySQLd/blob/39edcf37ecd9db38d2b36bff5dcabc3c98b2c25

An HTTP header injection vulnerability exists in 51CTO. Injection Point user-agentGET/rizhi2/count. php? & Amp; counturl = Require HTTP/1.1Host: logs.51cto.comUser-Agent: 1 *Referer: http://network.51cto.com/Cookie: www51cto = 612C2DAFB24CA6BCF7696B2

Some accounts are leaked due to database hit attacks on a proxy server in 37wan (the proxy server leaks the Account resources used for database hit) The attacker's proxy settings are incorrect, causing a large number of requests to be sent to the

M1905 Command Execution caused by zabbix injection on a website of movie Network Rt   http://118.145.26.196/zabbix/index.php The zabbix version is too low. I remember there was a front-end injection hole in the past, so I typed it with exp.Http: // 1

SQL Injection exists in the official medical inquiry APP (including 116 million + User Data) SQL Injection for APP security Objective: to query the Doctor's Android APPSQL Injection exists in the following areas:  Http://api.m.xywy.com/api? M =

A station in autohome.com has SQL injection to be filtered out. An Alibaba Cloud station has SQL Injection I wanted to come up with a verification script. I 'd like to give the result of the time

2345 filtering is required for SQL injection of a substation 2345 SQL Injection for a substation 2345 grand League union.2345.comInjection PointHttp://union.2345.com/jifen/mall/index.php? Category = & priceArea = & sendto = 1% 27% 20and % 20% 271% 27

An improper system login location on the cool music main station can cause brute-force cracking and the interface needs to be repaired (an existing case & a sub-station SQL injection) RTRTAn improper system login location on the cool music main

A codoon website needs to be filtered for SQL Injection It's a bit cold ~ Find a hole to play ~ The domain name of codoy should be www2.kugou.kugou.com, but it is obvious that the domain name is cname on the CDN node.  As a result, the ip address

WebShell upload interception Bypass WebShell upload interception and Bypass Test environment: Windows2003 + IIS6 + ASP.Dongle version:  Asp file upload interception:  A typical upload package is as follows (main part ):  Content-Type: