Cloud Security

New utility of php dos Vulnerability: CVE-2015-4024 Reviewed 0x01 how WAF is bypassedAccording to the principles of the php dos Vulnerability, when the multipart_buffer_headers function resolves the value corresponding to the header, there are n

Create a Windows Defender offline flash drive to thoroughly eliminate potential Trojan viruses Microsoft's default anti-virus software Windows Defender, like other similar products, relies on constantly updating the virus database to maintain the

Review 2015 of the heartbreaking ransomwareThe old saying goes: It turns out that ransomware will also make people face-to-face, because even the FBI is helpless. The FBI has publicly stated that the smartest choice for a ransomware infection is to

Getshell, a smart camera server in ZTE's home network, can leak private data such as videos and photos of millions of users on the cloud) Xiaoxing looks at getshell caused by improper configuration of a backend server of the smart camera. There is a

GRUB2's zero-day vulnerability affects Linux users. Ubuntu and RHEL patches are now available. According to the latest Ubuntu Security Notice of Canonical, a zero-day Security vulnerability exists in GRUB2 (GNU GRand Unified Bootloader), which will

A P2P online lending system foreground getshell and Arbitrary File Deletion Vulnerability (may involve a large amount of financial security) Boom ~Detailed description: /Www/Public/uploadify. php /* Uploadify background processing * // sets the

Unauthorized access defects in Redis can easily lead to system hacking The Sebug website publishes detailed vulnerability information about unauthorized access defects in Redis. Unauthorized Access defects in Redis can easily lead to system hacking.

ASUS TM-AC1900 Stack Buffer Overflow Vulnerability (CVE-2015-6949)ASUS TM-AC1900 Stack Buffer Overflow Vulnerability (CVE-2015-6949) Release date:Updated on:Affected Systems: Asus TM-AC1900. Description: CVE (CAN) ID: CVE-2015-6949The ASUS

Cisco uniied MeetingPlace unauthorized password change Vulnerability (CVE-2015-4262)Cisco uniied MeetingPlace unauthorized password change Vulnerability (CVE-2015-4262) Release date:Updated on:Affected Systems: Cisco uniied MeetingPlace Web

WPAD-based man-in-the-middle attack 0x00 Preface Windows Name Parsing Mechanism Research and defect utilization (http://www.bkjia.com/Article/201512/452217.html) is very inspired, so the actual use of further research, found that WPAD-based

Is it reliable to use a facial expression as a password? What can we do with passwords?Password, it's hard to say you love youGenerally, we recommend that you use a unique, complex, and preferably containing a weird character password, but you will

Cool music IDC backend leakage can obtain detailed network topology information (typical case of poor division of network boundaries) A typical case where detailed information about all network assets of the company is disclosed due to poor division

Magento has an XSS vulnerability, which allows attackers to manipulate online malls. Magento is an open-source e-commerce system. It is mainly for enterprise applications and can handle e-commerce needs, including shopping, shipping, and product

Principle Analysis of Word type Obfuscation Vulnerability (CVE-2015-1641) AforementionedWord does not verify the customXML object when parsing docx documents to process the displacedbymmxml attribute. It can pass in other tag objects for processing,

Introduction to intranet penetration using NetBIOS protocol name resolution and WPAD0x00 Preface The WPAD technology has been born for nearly ten years. Its biggest advantage lies in that in one or more LAN, when you need to set different proxy

Beijing Foreign Company Human Resources Service Co., Ltd. SQL Injection Founded in 1979, Beijing Foreign Company Human Resources Service Co., Ltd. (hereinafter referred to as FESCO) is the first company in China to provide professional human

XML-RPC amplification attack: "Violent aesthetics" against WordPress" Brute force cracking attacks are one of the oldest and most common attacks we have seen on the Internet so far. Hackers can use SSH and FTP protocols to crack your WEB

More tests that bypass restrictions using the whitelist 0x00 Preface In this blog, subteedoes not only introduce how to use installutil.exe to directly execute the pe file, but also introduces another method --Execute shellcode using

Common security vulnerabilities and defense methods of PHP websitesCurrently, PHP-based website development has become the mainstream of website development. This article focuses on exploring PHP website attacks and security prevention to reduce

BLUTO: DNS detection + domain name guessing + email Enumeration     BLUTO is an information detection and cracking tool that provides DNS detection, brute force cracking, DNS domain transfer, and email enumeration. DNS information and domain