Cloud Security

2015 Microsoft Windows vulnerability report      This article mainly analyzes the new security protection mechanisms or functions of Microsoft, Google, and other companies in 2015. In fact, in the previous year, Windows exploitation in 2014, we also

More than App Store game and application storage vulnerabilities are vulnerable to hacker attacks More than 1000 apps in the Apple App Store have security vulnerabilities and are vulnerable to hacker attacks, according to a research report released

Dell VPN Client netex1_0day Analysis   VPN Client is a tool used by most IT security experts. IT can be used to connect to a "restricted" LAN for anonymous Internet access and network traffic security. But imagine if the VPN Client can improve the

What the past virus looks like Malicious virus "LSD. COM" Phoenix technology news Beijing Time on February 9 news, according to The Verge Technology website, with The development of technology, The form of various products has been constantly

How to securely unlock fingerprints of LG smartphones within 30 seconds   Recently, a disturbing vulnerability has been discovered, which may cause you to repeatedly consider whether to allow your friends or acquaintances to use your LG V10

OpenSSL high-risk vulnerability allows attackers to decrypt HTTPS traffic OpenSSL maintainer fixes a high-risk vulnerability that allows attackers to obtain keys to decrypt encrypted traffic such as HTTPS. Although the potential impact of the

Thumb play has SQL blind injection somewhere involving tens of millions of data Log on and select a game to join the album.  Then there is an injection in the delete operation.    GET /index.php?action=profile&opt=DeleteOne&aid=4794&type=album

Glibc CVE-2015-7547 overflow vulnerability allows you to directly obtain a large number of host privileges in batches Google's security research team disclosed the glibc getaddrinfo overflow vulnerability. Almost all popular Linux Enterprise and

A weak zabbix password in CNTV causes 16 Intranet servers to execute commands The weak zabbix password of CNTV is harmful to everyone. However, since cntv has deployed CDN, I will not tell you the specific IP address, that is, in 115. 182. *. 75.115.

58. A substation in the same city has SQL Injection Improper repair WooYun: A Home SQL Injection

Leakage of sensitive information in multiple parts of the giant's Network (game source code + game documentation + website background + official forum + beauty baby certification) Leakage of sensitive information in multiple parts of the giant's

Sina Weibo's CSRF point: Weibo via my link (worms) The referrer bypassed the last year.Happy New Year! Feature Points: The comments feature on the http://wanwan.sina.com.cn/event/sssanguo_2/sg.php page, although the activity has ended, but the

How can I confirm your Vulnerability (discover Shell) How can I confirm the vulnerability on the giant network? Test found.[Email protected]1qaz2wsx! @#The account registered by the giant's network on the day of completion is a weak

Kingsoft Ciba has SQL injection in the background of a website. Kingsoft Injection of this site beforeWooYun: a management system leaked a lot of Kingsoft MAC (tftp + ftp account 30 + decrypted MD5 enters the management background)Decrypt the

Let's Encrypt recently popular free SSL tutorials In February October 2015, Weibo accidentally saw Let's Encrypt release the beta version. This is undoubtedly a major news for the coders who have been abused by https. Let's Encrypt stands out under

Green ant logistics platform main site SQL Injection Vulnerability Green ant logistics platform (SQL injection) POST /road/28373-39351/index.html HTTP/1.1Content-Length: 3119Content-Type: application/x-www-form-urlencodedX-Requested-With:

Mitm attack-Cookie Eruption 0x00 Preface Share the man-in-the-middle attack posture and try again and again. It was originally an old article, but it was too long-winded. I will repeat it in concise words today.0x01 Principle Traditional cookie

There is no need to log on to SQL injection in the Kai Lai OA system (with many cases) No Logon required Kai Lai technology OA system:Http://www.qioa.cn/product/xsd.htmlCustomer case:It affects many government and enterprise customers, but the case

A vulnerability in youxin can cause Intranet roaming (involving a large amount of internal Sensitive Information) It only proves that the vulnerability exists.Are you still recruiting security personnel? There are many problems. There are no

KesionCMS ASP edition SQL Injection Search Injection Obviously one injection, but it seems that the injection needs to be closed. First, the injection is submitted to prove that the injection is closed and handed over to