Cloud Security

Apache Struts 2 OGNL Cache Poisoning Denial of Service Vulnerability (CVE-2016-3093)Apache Struts 2 OGNL Cache Poisoning Denial of Service Vulnerability (CVE-2016-3093) Release date:Updated on:Affected Systems: Apache Group Struts 2.0.0-2.3.24.1

Analysis of encryption algorithms for Android Application Security Development During Android development, it is inevitable that some data needs to be encrypted and decrypted and stored to a local file, or transmitted to other servers and devices

How can I prohibit my computer from accessing shared files through a direct network connection or share files with my computer?Sometimes in terms of network security, we need to prohibit computer sharing of files. How can we achieve this? : Method 1:

PHP re-exploitation after release Vulnerability (CVE-2016-8616)PHP re-exploitation after release Vulnerability (CVE-2016-8616) Release date:Updated on:Affected Systems: PHP 7.x Description: CVE (CAN) ID: CVE-2016-8616PHP is a widely used

Late-night topic: How did these twelve lines of code make the browser explode? |     Cause Today, we found Cyber Security@ Cyber _ secThe Tweets let people shine: Crash firefox, chrome, safari browsers, and also restart iphone using this javascript

Several bypass positions monitored by X-SS the browser guard is based on the javascript hook mechanism to implement front-end xss protection. The product is very good and the performance is also good, but there are still some

Metaphor-A real life Stagefright exploit analysis0x00 Summary This article describes how to use Stagefright, one of the most notorious vulnerabilities in Android. Before that, we thought this vulnerability was very difficult to exploit. In this

Implementation and Prediction Techniques of the rand function in the glibc Library     Thanks to 0CTF, I held a very deep CTF competition at Jiaotong University. This competition has a web question. The question is very simple and is roughly as

Analysis of a security implementation method of IAT Hooking0 × 01 Introduction The Hook import table (IAT hooking) is a well-documented technique used to intercept imported function calls. However, many methods depend on some suspicious API

Payment security first letter easy to pay multi-site SQL Injection & weak background management password & PMA Unauthorized Access Vulnerability Payment security. This domain name is awesome. Beijing Welcomes You! 1. injection point:Python sqlmap.

You can view the authentication materials of the service platform of a sensitive Department (involving nearly 0.18 million images, ID card photos, reverse photos, license photos, and enterprise licenses) The authentication materials of a service

Website vulnerabilities no verification for specific sites vulnerabilities (weak passwords, SQL injection, and Arbitrary File Uploads) P2p financial security: website vulnerabilities in multiple locations (weak passwords, SQL injection, and

Logging of APP security is tiring for any user login (major broadcasters lay down their guns) I watched douyu live broadcast last night and saw a wave of ads for this APP. Then let's test the logic.Attackers can log on to major broadcasters (mainly

Explanation of N pose for SQL injection in the big talk DatabaseI. background With its powerful data storage capabilities and excellent data processing performance, Databases play a key role in information construction in all walks of life. With the

Yonyou software has multiple substations where SQL injection can run all the tables. UFIDA software second-level domain name:SQL Injection exists, and all tables can be run out. 1. SQL injection point 1-GETHttp: // **. **/servicehome/kmview. aspx?

CmsEasy direct connection to the database of the enterprise website management system (involving leakage of a large number of user passwords and sensitive information) CmsEasy direct connection to the enterprise website management system database

Foxit PhantomPDF WillClose: Reuse Remote Code Execution Vulnerability after release Affected Systems: Foxit Reader Description: Foxit Reader is a small PDF document viewer and print program.Foxit Reader's WillClose operation has a

96wan game platform storage vulnerability # Involving 0.3 million users (ID card # name # email, etc) Injection address  # SQL Injection URL: http://www.96wan.com/websiteapi/website_serverlist? Gid = 6 parameter gid controllable  Six databases

Introduction to intranet penetration using NetBIOS protocol name resolution and WPAD0x00 Preface The WPAD technology has been born for nearly ten years. Its biggest advantage lies in that in one or more LAN, when you need to set different proxy

Browser DoS Attack and Defense Analysis of 12 lines of code There is a 12-line JavaScript code that can crash firefox, chrome, and safari browsers, as well as restart the iphone and crash android, the author of this article analyzes and interprets