Cloud Security

OpenSSH exposes a high-risk vulnerability, which may expose the private key. OpenSSH releases the new client version and fixes a high-risk vulnerability that may leak the private key. The vulnerability exists in the version used by end users and

Corega CG-WLBARGS Privilege Escalation Vulnerability (CVE-2015-7792)Corega CG-WLBARGS Privilege Escalation Vulnerability (CVE-2015-7792) Release date:Updated on:Affected Systems: Corega CG-WLNCM4G Description: CVE (CAN) ID: CVE-2015-7792Corega

Google Chrome MIDI Subsystem Application Crash Vulnerabilities (CVE-2015-6792)Google Chrome MIDI Subsystem Application Crash Vulnerabilities (CVE-2015-6792) Release date:Updated on:Affected Systems: Google Chrome Description: CVE (CAN) ID: CVE-2015

Juniper screnos bypasses the authentication Backdoor Two backdoors emerged last week in the system screnos, which runs the Juniper firewall. One backdoor is related to the elliptic curve pseudo-random number generator, allowing attackers to decrypt

From the green software alliance sub-station to the fall of the server Due to the Administrator's negligence and unreasonable permission control, the server fell into the ftp://m.xdowns.com/account No.: mpassword: minitial, aligreennet, and its

Sensitive information exposed by thumb play (tens of millions of users have logged on to the management background) 20 Rank + gift? It is also a problem not to handle the vulnerability after confirmation!From: WooYun: thumb games involve improper

SQL Injection exists in the second-level station of a main site in the Air Network SQL Injection exists in the second-level station of a main site in the air network. Only one database is tested and the account password and email address of the cms

Multiple SQL injection vulnerabilities in a substation of Huawei Multiple SQL injection vulnerabilities in a substation of Huawei Http://consumer.huawei.com/support/services/service/tcsReservation/findReservationByReservationNo? Jsonp = jquery19102

A system design defect in Suzhou tietong (four systems, nine regions, hundreds of OLT devices exposed \ tens of thousands of users are expected to be affected) This wonderful defect! **.**.**.**:9000 Contains four systems:  Suzhou tietong telephone

DVWA Series 8 medium-level Command Execution Vulnerability Set DVWA Security to medium, and click "View Source" in Command Execution to View the webpage Source code.Here, the variable $ target used to receive the IP address entered by the user is

A system vulnerability in Guohua life may cause leakage of tens of millions of user data. The database is threatened. Calculate 20 rank. Http: // 59.151.39.90/indexlis. jsp    POST http://59.151.39.90/common/easyQueryVer3/EasyQueryXML.jsp

Cool music MySQL blind injection (bypass filtering) Where Parameter: sid (GET) Type: AND/OR time-based blind Title: MySQL It seems that the BENCHMARK function is no longer usable, but the test finds thatTrue

Alimama traveled to a website where tamper bypasses SQL Injection Another website found an injection during packet capture !~~~ Injection address:Http://m.lvmama.com/activity/index.php? S = L1509/shiyiCityDataInfo & v = 0.708363635931164 & callback =

An important website of Anhua insurance has the JAVA deserialization Vulnerability (which can penetrate multiple systems in depth) Anhua insurance http: // 221.8.57.106: 7006/http: // 221.8.57.106: 7009/weblogic deserialization vulnerability rebound

Website injection of a certain State-owned company in Taiwan My skates are the most fashionable and fashionable... Code Region http://**.**.**.**/product/products.php?cid=3 Code Region [09:26:22] [INFO] the back-end DBMS is MySQLback-end

Anhui Graduate Employment Information Network SQL Injection # affects a large number of student archives http://**.**.**.**/ 0x02 details Time-based Boolean blind Injection 0x03 usage  Sqlmap can be tested and configured with scripts to bypass space2

The retail system of a store in Shenyang mobile is intruded into (webshells can be found in the Intranet) The retail system of Shenyang mobile stores has been infiltrated. tracking clues can obtain server permissions, obtain local database

A function design logic defect of the public assistant can hit the database RT Http ://**.**.**.**/There is no verification code on this login page to crack the proof, and the password is also transmitted in plaintextBurp packet capture, set the

Self-built CDN to defend against DDoS attacks (1): Build a persistent defense line PrefaceIn this article, the case and response experience of DDoS come from the actual scenarios of a customer service system with a high market share, we analyze the

Exploring phishing emails: How do hackers forge emails? Disclaimer: This site provides security tools and procedures (methods) that may be offensive and only for security research and teaching. You are at your own risk! Nowadays, phishing emails are