Cloud Security

Apple OSX Message cross-origin Scripting Vulnerability (CVE-2016-1764) Apple's CVE-2016-1764, fixed in March, is an application-layer vulnerability that can cause remote attackers to leak all the message content and attachments with the iMessage

PhpMyAdmin full path leakage Vulnerability (CVE-2016-2044)PhpMyAdmin full path leakage Vulnerability (CVE-2016-2044) Release date:Updated on:Affected Systems: PhpMyAdmin 4.5.4> 4.5.x Description: CVE (CAN) ID: CVE-2016-2044Phpmyadmin is an

How to set the access permission for shared files on the LAN and record the access logs of shared files on the LANCurrently, many local networks have file servers, which usually share files for access by LAN users. However, to protect the security

How can I prohibit my computer from accessing shared files through a direct network connection or share files with my computer?Sometimes in terms of network security, we need to prohibit computer sharing of files. How can we achieve this? : Method 1:

Oracle Outside In Technology Local Denial of Service Vulnerability (CVE-2015-6013)Oracle Outside In Technology Local Denial of Service Vulnerability (CVE-2015-6013) Release date:Updated on:Affected Systems: Oracle Outside In Technology 8.5.2Oracle

SECCON 2015 CTF Selection: A 400-point Android APK reverse question | focus on hackers and geeks     This is the second question of "Android APK reverse" in the SECCON 2015 CTF challenge, with a score of 400. The prompt is: "The key is stored in

One Community APP and multiple Website Security Vulnerabilities (GetShell) Community APP and website No. 1 have multiple high-risk security vulnerabilities and have obtained all website and server permissions.Detailed description: Community APP and

115 browser design defects can cause remote theft of arbitrary files on the user's system This vulnerability was discovered two months ago .. I can only say that this is tricky to use... currently, 115 network disks must be forced to use 115

Use Google to search for specific strings in malicious Samples It is useful to search for specific strings in a malicious sample. For example, you may find malicious samples with similar code for different targets. This article will describe this

Several bypass positions monitored by X-SS the browser guard is based on the javascript hook mechanism to implement front-end xss protection. The product is very good and the performance is also good, but there are still some

SQL Injection and XSS vulnerabilities in a website of Dangdang Love.dangdang.com is a literary page... however, SQL injection and XSS exist, and the database management account is dba without a password .... SQL Injection: sqlmap-u

Jumei youpin's merchant background account system is incomplete and requires token (you can log on to any merchant management background) Imperfect Account System   Http://supplier.ext.jumei.com/index.php? R = site/login &? Request_uri = https % 3

Crowdfunding order details page user information can be traversed and leaked The crowdfunding order details page does not have permission to view. According to the order rules, N user information is

Glassfish Arbitrary File Reading Vulnerability in an app server of youfu Arbitrary File Reading Vulnerability in glassfish app ServerIp211.151.62.149Verify if the vulnerability exists  http://211.151.62.149:4848/theme/META-INF/%c0%ae%c0%ae/%c0%ae%c0%

DLL injection posture (2): CreateRemoteThread And More There is actually a lot of content about this series, and the examples provided are all self-compiled source code, there are also related articles in the Open security and Infosec Institute. Of

Diyou P2P stock-taking system file design defects can be injected (arbitrary login/password change) Such as question Modules \ ucenter \ api \ uc. php appears on the uc interface file Error_reporting (7); define ('uc _ CLIENT_ROOT ', DISCUZ_ROOT. '.

263 using enterprise mail and personal mail to kill arbitrary User Logon Enterprise mail and personal email can be killed.Suffixes of affected mailboxes include: All enterprise mailboxes, net263.com, 263.net, 263.com, 263.net.cn, and x263.net.263

The sofa housekeeping APK application has a general design defect (Remote horse farming or other operations) Rt After the "sofa Guest Manager" APK application is installed, you can directly control the device through the Internet. You can remotely

Kingdee collaborative office system has five high-risk SQL Injection Vulnerabilities Kingdee collaborative office system has five high-risk SQL Injection Vulnerabilities Files with vulnerabilities:/Kingdee/Template/TemplateEdit. jsp? RecordID =

Unserialize (): vBulletin 5.x. x Remote Code Execution Recently, a vBulletin RCE exploitation and brief analysis were exposed. The cause of this vulnerability is that the vBulletin program uses unserialize () when processing Ajax API calls () the