Cloud Security

WordPress MailCWP plugin 'mailcwp-upload. php' Arbitrary File upload VulnerabilityWordPress MailCWP plugin 'mailcwp-upload. php' Arbitrary File upload Vulnerability Release date:Updated on:Affected Systems: WordPress MailCWP Description:

Apache Tomcat block Request Remote Denial of Service Vulnerability (CVE-2014-0227)Apache Tomcat block Request Remote Denial of Service Vulnerability (CVE-2014-0227) Release date:Updated on:Affected Systems: Apache Group Tomcat Apache Group Tomcat

CURL/libcURL NTLM connection Remote Security Restriction Bypass Vulnerability (CVE-2015-3143)CURL/libcURL NTLM connection Remote Security Restriction Bypass Vulnerability (CVE-2015-3143) Release date:Updated on:Affected Systems: CURL 7.10.6-7.41.0

Processing experience after the server is hackedNot long ago, I read a hacker story (Master vs. blog server hacked). After reading this article, I realized that my machine is in a streaking state, then I checked the log on the server with great

Self-cultivation of Trojans: The latest variant of the financial malware f0xy, which is quite witty Security researchers discovered the first f0xy malicious program in January 13, 2015, and then the f0xy infection capability was constantly changing

GLPI 0.85 blind SQL Injection Vulnerability Release date:Updated on: Affected Systems:GLPI Description:CVE (CAN) ID: CVE-2014-9258 GLPI is a computer and equipment management system. In versions earlier than GLPI 0.85.1, ajax/getDropdownValue. php

Sangfor a management system product BASH Remote Command Execution Vulnerability (no login required) Sangfor a system BASH Remote Command Execution Vulnerability Sangfor application Delivery Management System. Multiple versions have the bash remote

Cisco IOS and ios xe Software Denial of Service Vulnerability (CVE-2014-3409) Release date:Updated on: Affected Systems:Cisco IOS Description:Bugtraq id: 70715CVE (CAN) ID: CVE-2014-3409 Cisco IOS is an interconnected network operating system

Metasploit penetration testing of Ubuntu 12.04 (1) This article is mainly about entertaining exercises. Share the Attack Details, including some script files from various sources modified by the original author. The Penetration Process is not the

The principle of LAN virus infection and its prevention methods Computer viruses have been spreading over networks for a long time, and they can also rapidly breed in the LAN, resulting in mutual infection of LAN computers, making the entire company'

Talking about how to fix the DUMP of the shelled ELF File In the previous article (http://www.bkjia.com/Article/201505/402725.html), I have introduced how to debug the shelled ELF, which is not described here, directly entering the subject, taking a

WIFI universal key password query interface algorithm cracking (unlimited query of users' AP plaintext passwords) All Apps involve communication interfaces. After reading the APP with the master key, the plaintext HTTP protocol is simple. There is a

PC egg tokens are not strictly audited. As a result, any account information can be viewed and any VIP egg can be extracted. Privacy information leakage caused by poor token auditing on the Web Side of the PC egg App.0x01 preparationsHardware: iMac

Data-Hack SQL Injection Detection0x00 Preface I was planning to translate this series of tutorials. I came to the article later and found that the teaching process was not very friendly, so I followed his ideas, but I made a lot of changes, another

THEOL network teaching integrated platform general-purpose Arbitrary File Upload Any file is uploaded somewhere in the system. The full name of the system is "THEOL Tsinghua Education Online" Network Teaching comprehensive platform, which is

Web security practices (11) User Name Enumeration User name enumeration and password guessing are two core components of web attack verification. This article only discusses some common cases of user name enumeration. Body 11.1 obtain the user name

A person's martial arts: analysis of the general idea of penetration testing (1) Preface Penetration Testing is both a technology and an art. This technology (ART) was not made by everyone at the beginning. It is said that no one will walk at birth,

RCE (Object Injection) caused by OQL in product implementation)0x00 Preface A few days ago, I was told of the following vulnerability types: Address: http://blog.emaze.net/2014/11/gemfire-from-oqli-to-rce-through.html GemFire memory database is

Six QL injection vulnerabilities in a general campus website construction system Different injection points are identified by parameters: First: "tid" parameter Injection  http://www.h1906.net/dpma/FWeb/WorkRoomWeb/Web/TeacherSourceDetail.aspx?SFID=2

Wdlinux virtual host management system file without access verification directly create a database user The wdcp_v2.5.10 file has no access verification and is used to directly create a database account.The wdcp_v2.5.10 file has no access