Cloud Security

Control Flow protection mechanism of Windows 10   Operating system developers are always keen on improving vulnerability defense technologies. Therefore, Microsoft has enabled a new mechanism by default in Windows 10 and Windows 8.1update3 (released

Man-in-the-middle attack caused by improper handling of TLS certificates by the Cheetah and 2345 browsers When the SSL/TLS certificates provided by the https web pages opened by the two browsers are invalid (such as self-Signed and Domain Name

SniffIt 'sn _ overflow file. c' multiple Stack Buffer Overflow Vulnerability Release date:Updated on: Affected Systems:SniffitDescription:Bugtraq id: 71318CVE (CAN) ID: CVE-2014-5439 Sniffit is a data sniffer and monitoring tool. It can run on a

FortiManager and FortiAnalyzer Web ui xss Vulnerability (CVE-2014-2336) Release date:Updated on: Affected Systems:Fortinet FortiAnalyzer Description:CVE (CAN) ID: CVE-2014-2336 FortiAnalyzer is a centralized Log Data Analysis Solution for

Shellshock analysis CVE-2014-6271 Some time ago, the shell-breaking vulnerabilities made various companies very busy. The vulnerabilities have been around for a while, and the analysis of the Internet has also been transferred. When they stop, it's

Numara/BMC Track-It! SQL Injection Vulnerability Release date:Updated on: Affected Systems:BMC Track-It! 11.3.0.355Description:CVE (CAN) ID: CVE-2014-4873 BMC Track-It! Is an integrated IT help desktop and asset management solution. BMC Track-It!

Mozilla Firefox/Thunderbird remote code execution vulnerability in CVE-2014-1557) Release date:Updated on: Affected Systems:Mozilla Firefox 31Mozilla Thunderbird 31Description:--------------------------------------------------------------------------

Batch Test local area network host online scripts Because there are many hosts and many VLANs in the LAN, you can always know the number of online hosts and write scripts to check the online hosts. The result is that the host is displayed in green

CentOS File System Security 1. Lock important system files System O & M personnel may sometimes encounter situations where the root user cannot modify or delete a file. Most of the reasons may be that the file is locked. In Linux, the command for

All ESPCMS versions can be accessed by any user All ESPCMS versions can be accessed by any user /Interface/memebermain. php $rsMember['userid'] = $this->ec_member_username_id;$rsMember['rankname'] = $this->get_member_purview($rsMember['mcid'],

Dongle another defense rule bypass The dongle is not properly handled somewhere, resulting in defense being bypassed. 1: During the test yesterday, the length seems to have bypassed the dongle defense. During the test today, we found that truncation

Haier Forum SQL injection leakage member information can be modified UC administrator information and solutions SQL Injection, DZ ForumData at least 2 WTrs_ucenter_members_bak[8846 entries]Table: trs_common_member[2727 entries]Table: uc_members[8326

MySQL injection for Renren substation (without equal sign injection, with verification script) The SQL injection solution for Renren sub-station is incomplete. You can inject the code without the equal sign and attach a verification

China Telecom Tianyi unified points merchant self-service platform has WebDAV write permission vulnerability First of all, we did not use this vulnerability to obtain Webshell. However, it is highly risky to directly PUT the file, and the Tianyi

Due to poor filtering of ecshop, tens of thousands of online stores can be getshell (certain conditions are required) I tested both v2.7.3 and v2.7.4 successfully. Other Visual versions can also be getshell. 1. XSS is caused by lax filtering of

Jsp can be connected with a kitchen knife in one sentence, and the JSP pants removal script " + excuteCmd (request. getParameter ("cmd") + "");} else {out. println (":-)") ;}%> Password 023 " + excuteCmd (request. getParameter ("cmd") + "");}

[Anti-spoofing art]: Intrusion warning (1)After being interrupted for a long time, I wanted to update an article over the weekend. I didn't want to suddenly burn it to 39.5 degrees. I had to breathe my breath and breathe my breath. I went to the

Php header () usage problems caused by WebInspect attacks The latest project was under severe attacks by the test group, exposing many problems. One of the questions is impressive! The WebInspect scanning tool was used in the test to scan the

SQL Injection + background getshell in an OA system SQL Injection in an OA system + getshell in the background: the first time a general-purpose vulnerability is submitted, it's so tight. [Bye-bye]  [SQL injection]SQL Injection exists on the login

Secret penetration testing tool: Webshell batch management tool QuasiBot Statement:The security tools described in this article are only used for penetration testing and Security teaching. No illegal use is allowed. QuasiBot is a php-compiled