Cloud Security

DLL injection: Windows Hooks     DLL injection aims to put the code into the address space of another process. So how can we implement DLL injection? In fact, there are several methods to achieve this in Windows. Here we first try to use

Tails: an open-source operating system dedicated to Privacy Protection Tails is a Live operating system designed to protect your privacy. It also allows anonymous access to the network and can be installed on a CD, USB flash drive, or SD card and

Android kernel/sys. c Privilege Escalation Vulnerability (CVE-2015-6640)Android kernel/sys. c Privilege Escalation Vulnerability (CVE-2015-6640) Release date:Updated on:Affected Systems: Android Android 6.0 ( Description: CVE (CAN) ID: CVE-2015

Cisco Wireless LAN Controller Access Vulnerability (CVE-2015-6314)Cisco Wireless LAN Controller Access Vulnerability (CVE-2015-6314) Release date:Updated on:Affected Systems: Cisco Wireless LAN Controller >= 8.1Cisco Wireless LAN Controller >=

FFmpeg ff_dwt_decode Function Denial of Service Vulnerability (CVE-2015-8662)FFmpeg ff_dwt_decode Function Denial of Service Vulnerability (CVE-2015-8662) Release date:Updated on:Affected Systems: FFmpeg Description: CVE (CAN) ID: CVE-2015-866

A weak password in the background of a public system can cause the entire domain to fall Give me a dozen. Https: // 27.115.34.17/PEM/Weak PasswordAdministrator 222222Guest 111111.All the project information and the products provided by the supplier

Sensitive information exposed by thumb play (tens of millions of users have logged on to the management background) 20 Rank + gift? It is also a problem not to handle the vulnerability after confirmation!From: WooYun: thumb games involve improper

ZOL Zhongguancun online APP Multiple SQL injection (including 949 tables) SQL Injection for APP security Target: ZOL Zhongguancun online APPCheck that SQL Injection exists in the following places: (the session may have expired. Please obtain it

Google financial was exposed to the reflection File Download (RFD) Vulnerability     David Sopas, a Portuguese network security expert, found a reflection File Download (RFD) vulnerability that affects Google finance. I found this vulnerability

SQL Injection exists in the second-level station of a main site in the Air Network SQL Injection exists in the second-level station of a main site in the air network. Only one database is tested and the account password and email address of the cms

A problem in the CCN Forum involves million user information including passwords. This question is interesting. The problem is that port 11211 is enabled on memcache.  Default connection 182.92.192.240: 11211 total number of records: 1407685

Introduction to privilege abuse attacks and defense 0x00 Introduction Permission abuse is generally classified as a logic issue. This refers to the fact that the server is too open or has insufficient permissions. As a result, attackers can directly

SQL Injection exists in a sub-station of coapey SQL Injection Http://campus.coolpad.com/index.php? C = submitResumes & f = saveProjectInfoProject % 5bfield_coolympus unid % 5D = 50288739 and (select 1 from (select count (*), concat (version (),

Weak Password of a station in COFCO + secondary injection Weak Password of a station in COFCO + secondary injection Http: // 182.151.206.253/    You can log on to ihome directly.WooYun: Packaging of several system vulnerabilities in COFCO

Database Table Suning Tesco a station database can be imported locally (the whole station data/administrator password is leaked) I can't go on like this anymore. What about a good dog ~~Online supermarkets, preferred Suning Tesco I heard that Suning

Persistent XSS Analysis of Firefox expansion Center   FirefoxADD-ONS this siteCreateCollections. Collections is a collection of the same add-on tools. Everyone can create or share tools in the collection. Each collection has a separate URL link, so

A large number of security and monitoring devices in Yushi, Zhejiang Province have general design defects (root permission) Multiple models are involved Involved in model ISC3500-EL, ISC2500-S and so on, the specific manufacturer should be more

A grand game site injects 12 Databases Rt Many important databases such as bbs on the website wan.sdo.com do not go deep into GET/Read/GetReplyDetail? Parentid = 9181 & replynum = 2 & pageindex = 1 & pagesise = 5 HTTP/1.1User-Agent: Mozilla/5.0

Use activity vulnerabilities to brush up Youku Baiyin members without limit You can register an Alibaba Cloud account for a youku member activity without having to register directly. You can receive silver members without limitation. Youku account

Website security dog File Upload bypass 2 (Windows + apache) Website security dog (APACHE version) for Windows 3.5.11730 Attackers can bypass the extended ascii code.The test shows that the expanded ascii code added to the file suffix can bypass