Cloud Security

Android Hacking Part 1: Attack and Defense (serialization) of Application Components) With the rapid growth of mobile apps, mobile app security has become the hottest topic in the security field. In this article, let's take a look at how to attack

WordPress WP Statistics plug-in 'visitor' screen HTML Injection Vulnerability Release date:Updated on: Affected Systems:WordPress WP Statistics 8.4WordPress WP StatisticsDescription:Bugtraq id: 71520 WP Statistics is the WordPress website

Wireshark AMQP parser Remote Denial of Service Vulnerability (CVE-2014-8711) Release date:Updated on: Affected Systems:Wireshark 1.10.0-1.10.10Description:Bugtraq id: 71070CVE (CAN) ID: CVE-2014-8711 Wireshark is the most popular network protocol

Play bad vulnerability: Let the CVE-2014-4113 overflow Win8 1. Introduction In October 14, 2014, Crowdstrike and FireEye published an article describing a new Windows Elevation of Privilege Vulnerability.Articles about CrowdstrikeMing: This new

Up to 12 million websites may be infiltrated by Drupal vulnerabilities. Drupal, an open-source content management system, issued a warning. If a Patch Is Not Installed within seven hours after the security fix is released, the website using Drupal 7

Arbitrary website Forgery Vulnerability in UC browser (PC) Arbitrary website Forgery Vulnerability in UC browser (packaging)Browser version   #1. Arbitrary website forgeryPOC:  An error will occur after running the POC, but the UC browser helps us

Remote buffer overflow vulnerability in Oracle Database Export exp.exe Parameters Remote buffer overflow vulnerability in Oracle Database "exp.exe" parameter files Release date:Updated on: Affected Systems:Oracle 10gOracle Oracle11gDescription:------

Thunder chrome plug-in stack overflow can cause arbitrary code execution Thunder is an Internet download software developed by thunder. Thunder is based on multi-resource hyper-Threading Technology.Download the software. When installing thunder, the

WordPress GRAND Flash Album Gallery plug-in 'gid' parameter SQL Injection Vulnerability Release date:Updated on: Affected Systems:WordPress GRAND FlAGallery Plugin 2.xDescription:---------------------------------------------------------------------

Wireshark Catapult IrDA parser Denial of Service Vulnerability (CVE-2014-5161) Release date:Updated on: Affected Systems:Wireshark Description:--------------------------------------------------------------------------------Bugtraq id: 69001CVE (CAN)

Multiple I-O DATA Network Camera Authentication Bypass Vulnerability Release date:Updated on: Affected Systems:I-O data ip CamerasDescription:--------------------------------------------------------------------------------Bugtraq id: 68989CVE (CAN)

Ao you's internal network is not completely roaming (a large number of internal and external network source code can be leaked) I was wondering if I could prove that I had access to the data of the proud game users. The Administrator found that I

Experience Sharing: building a social engineering database TIPS Recently, we have been building a social engineering database. There are also many articles on the Internet, but few details are involved. I would like to share some of my experiences

How to deal with various terminalsDingchang Poetry I don't know if the subway ticketing terminal is swollen. cmd said hi ~ The Emperor's airport navigation terminal is a model in the industry, but it does not seem to have been pushed ~ Magu subway

ShellShock: CVE-2014-6271 vulnerability and emergency repair methods About this vulnerabilityHello, a Linux security vulnerability was found to be more serious than "heartbleed", that is, the ShellShock: CVE-2014-6271 vulnerability, attackers can

General SQL injection vulnerability in the CMS system of Peking University founder Xiang Yu SQL injection is caused by the lack of filtering in the interface of the CMS system "user login verification" of Peking University founder Xiang Yu 正 CMS

Simple exploration of XssIn the previous content, I introduced some basic XSS cross-site scripting concepts. I believe that you have some knowledge of cross-site scripting. Next, we will describe how to discover some simple XSS vulnerabilities.The

Defects in Wi-Fi fast transfer verification of Jinshan kubernetes for Android Bugs in the process, non-technical issues, non-trivial flow, not awesome. Kingsoft kubernetes comes with the wifi fast transfer function. When this function is enabled,

Discuz! 6. x/7.x global variable protection bypass causes Command ExecutionVulnerability Overview: In php5.3.x, the default value of request_order in php. ini is GP, which leads to Discuz! 6. x/7.x global variable protection Bypass

YXCMS1.2.6 version 1 Arbitrary File Deletion + 6 unauthorized operations   After a simple audit, we found that YXcms has an Arbitrary File Deletion vulnerability and multiple unauthorized operations (only one example is provided as proof)1.