Cloud Security

Use of FreeBSD Remote DoS attack analysis (CVE-2016-1879)   FreeBSD team announced a serious vulnerability in their operating systems. Hackers can exploit this vulnerability to launch DoS attacks, escalate privileges or steal sensitive system

Advantech WebAccess Buffer Overflow Vulnerability (CVE-2016-0860)Advantech WebAccess Buffer Overflow Vulnerability (CVE-2016-0860) Release date:Updated on:Affected Systems: Advantech WebAccess Description: CVE (CAN) ID: CVE-2016-0860WebAccess

Advantech WebAccess File Upload Vulnerability (CVE-2016-0854)Advantech WebAccess File Upload Vulnerability (CVE-2016-0854) Release date:Updated on:Affected Systems: Advantech WebAccess Description: CVE (CAN) ID: CVE-2016-0854WebAccess

Linux new Trojan Ekocms exposure: screenshots taken every 30 seconds Dr. Web, a Russian software vendor, recently discovered the Linux platform's new Trojan Linux. Ekocms.1. From the trojan samples, the Trojan can take screenshots and record audio

Noriben sandbox: deal with malware in minutes   We hope that everyone can do better in the new year, especially for faster and more effective analysis of malware. Several years ago, I built a malware analysis sandbox script for daily analysis and

Master station SQL injection of gionee OS (with py script) ~~~~~ Injection Point http://www.amigo.cn/ami_stat/ami_stat.php? Val2 = undefined & val1 = 111 * & type = searchThe injection parameter is val1.Normal detection fails. You need to use

A sub-station of Changan Mazda has a vulnerability and can be executed with commands. A sub-station of Changan Mazda has a vulnerability and can be executed with commands. The website was previously exposed to the JAVA deserialization

Chrome malicious extensions can monitor users' online behavior Recently, researchers from security company Malwarebytes have investigated a malicious Chrome extension.Malware infected usersThis malicious Chrome extension monitors users' online

Getshell can be used for a substation on the 19th floor. Getshell can be used for a substation on the 19th floor. It has been more than a year since the last Intranet roaming on the 19th floor. Some of them opened the dusty notepad and suddenly

Heart bleeding vulnerability in a business system of Volvo Automotive Group Deliver the vulnerability to your car Https: // 54.246.181.46/    Sending Client Hello...Waiting for Server Hello... ... received message: type = 22, ver = 0302, length = 66

User Password leakage due to improper p2p configuration (plaintext) The user's account and password (in plaintext) can be seen directly) I was shocked to see this. p2p is really unreliable. The company is affiliated with the Financial Management

A vulnerability in China's talent hotline involves more than 8 million users (including passwords) Bored in the middle of the night, I want to see how my sister paper has been in such a situation for a long time, so this time ...... An

Cookie injection packaging and arbitrary User Password Reading Vulnerability (1.3 million student data) Cookie injection packaging and arbitrary User Password Reading Vulnerability (1.3 million student data) Http://www.17xuexi.com/reg/reg3.asp? Jz_

A weak password in a Midea system causes Getshell to threaten the Intranet. Different port addresses are different systems. WooYun: Getshell is compared to this vulnerability because of a weak password in the marketing system of a dealer in

Dual chopsticks official APP has SQL injection (including 114 million + User Data) SQL Injection for APP security Objective: To go home to eat with dual chopsticks official APPCheck that SQL Injection exists in the following places: (page_key in

Db_owner permission is improved by webshell. Reduce the backup file size and improve the webshell success rate.Add a parameter with differential declare @ a sysname, @ s nvarchar (4000) select @ a = db_name (), @ s = 0x77006F006B0061006F002E006200610

XSS: insecure EZDATA script At the time of writing this article, I do not know who the script is, but many websites have this vulnerability. In this article, I will analyze the insecure script "EZDATA. I found this script when I browsed the Alexa

Midea's bidding and purchasing platform uploads a lot of contract information related to Getshell Rt. No one else has been there yet. You can give it a little more late at night. Http://pur.mideadc.com/ProviderRegister.aspx registration upload, will

SQL Injection (including 820 million + User Data) exists in the main site and sub-stations of retao www) Objective: www.letao.comCheck that SQL Injection exists in the following places: (injection parameter cid, Stacked

Sina Weibo's CSRF point will be followed by my link Recently, I was looking for a CSRF issue on Sina Weibo. As a result, I did not review the issue on wooyun. Later, I found several platforms that were packaged and sent to them.Now we can see this!