Cloud Security

Resin-startup script httpd. sh AnalysisAfter analyzing the tomcat startup scripts, we found that catalina. THE sh script has a problem in stopping, but the author has never found that the service cannot be stopped when using resin in the production

Seagate NAS Remote Code Execution Vulnerability OJ Reeves, a foreign security researcher, discovered a remote code execution vulnerability in Seagate NAS and reported it to the official website on July 15, October 7. However, the vulnerability was

Glibc Heap Buffer Overflow Vulnerability (CVE-2015-1473) Release date:Updated on: Affected Systems:GNU glibcDescription:Bugtraq id: 72499CVE (CAN) ID: CVE-2015-1473 Glibc is the libc library released by GNU, that is, the c Runtime Library. Glibc

2529 wangmeng uses the latest Internet Explorer vulnerability to force installation of light micro-Terminal When I browsed the movie website http://www.dy2018.com In the ie compatibility mode of Baidu browser, I found that somehow I ran a game

Android Broadcast Security0x00 Popular Science Broadcast Recevier is a component that focuses on receiving and processing Broadcast notifications. Many broadcasts originate from system code, such as notifying time zone changes, low battery, taking

GNU gettext "get_string ()" Integer Overflow Vulnerability Release date: 2014-12-02Updated on: 2014-6 6 Affected Systems:GNU gettext 0.19.3Description:Gettext is used for system internationalization (I18N) and localization (L10N ). GNU gettext 0.1

Internet Explorer GC Information Leakage This vulnerability was released by dion Ox a few months ago. Recently, it also won the pwnie award. In the original article, we talked about flash, ff and Other GC engines all adopt conservative mark clearing

Seven misunderstandings about HTTPS When developing webpages, you often need to observe HTTP Communication. I use two main tools: Firebug in Firefox and Fiddler in IE. However, I have always heard people say that paid software HttpWatch is the best

Step 5: Protect Web Services in Windows A considerable number of large and medium-sized enterprises are using Windows Server and. Net architecture to build enterprise Web services and applications. Therefore, Web Services and Web applications are

Virus Trojan scan: Reverse Analysis of pandatv incense (medium)I. Preface The previous article explained the analysis at the entrance to the disassembly code of the "pandatv incense" virus sample. Although the core part of the virus has not been

PHP automated code auditing technology0x00 As there is nothing to update in the blog, I will summarize what I have done. As a blog, I will mainly talk about some of the technologies used in the project. At present, there are many PHP automated

ALi ct f 2015 write up 0x00 CakeCake is an Android question. The specific process is to input a string, initialize an array with a length of 16, and then combine the string with the array xor. So we only need to perform xor again and we will be

Pack the latest version of ThinkSAAS Vulnerability SQL Injection + File Inclusion +...Learn from xfkxfk, pack multiple vulnerabilities, and want to go through a major vendor process. In the latest version, the tsUrlCheck () function has multiple

Prevention of CSRF for Web Security Cross Site Request Forgery (Cross-Site Request Forgery) is a type of network attack, the attack can send a request in the name of the victim to the attacked site without the victim's knowledge, so that the

TerraMaster NAS Network Storage Server unlimited getshell and other vulnerabilities (poc) Unlimited getshell, add any administrator, download any file, multiple information leaks ..  POST/include/upload. php? TargetDir = .. /cgi-bin/filemanage/HTTP/1

Csrf Cross-Site Request ForgeryBasic concepts of csrf Cross-Site Request Forgery It is an attack method that allows attackers to send arbitrary HTTP requests through victims. The victim referred to here is an uninformed accomplice, and all forged

Web security practices (10) attack weblogic This is a small experiment I spent more than two hours doing. I detected only one website and didn't systematically perform overall security analysis on WebLogic. Click it. Body 1. Search for WebLogic

NITC Enterprise Edition SQL Injection allows you to reset any User Password NITC Enterprise Intelligent Marketing System function getip( ){ if ( isset( $_SERVER ) ) { if ( isset( $_SERVER[HTTP_X_FORWARDED_FOR] ) ) {

Discuz! Public Platform Plug-in patches bypass unauthorized deletion of databases Discuz! The public Platform Plug-in patches can bypass unauthorized database deletion and bypass Baidu cloud waf.  The previous vulnerability was published by getshell.

Dongle SQL Injection Protection Policy Bypass Vulnerability   Dongle Bypass Vulnerability: attackers can bypass a character directly. In some special cases, they must be used with annotator.Core character used for bypass: % 0A, which must be used