Cloud Security

MIT Kerberos 5 kadmind Denial of Service Vulnerability (CVE-2015-8630)MIT Kerberos 5 kadmind Denial of Service Vulnerability (CVE-2015-8630) Release date:Updated on:Affected Systems: MIT Kerberos 5 MIT Kerberos 5 MIT Kerberos 5 MIT Kerberos 5 MIT

Analysis of QQ simulated login implementation 0x00 Overview It was originally issued together with the previous article. Later, it was put on hold. I'm glad to have been involved in the discussion and discussion. (B) slot (4). In fact, I don't have

Apple iOS FontParser Memory Corruption Vulnerability (CVE-2016-1740)Apple iOS FontParser Memory Corruption Vulnerability (CVE-2016-1740) Release date:Updated on:Affected Systems: Apple iOS Description: CVE (CAN) ID: CVE-2016-1740IOS is an

OpenSSH Command Injection Vulnerability (CVE-2016-3115) OpenSSH Command Injection Vulnerability (CVE-2016-3115) Release date:Updated on:Affected Systems: OpenSSH OpenSSH 〈 7.1p2 Description: CVE (CAN) ID: CVE-2016-3115OpenSSH is an open-source

How to Set and use Firefox sandbox   This article describes and introduces some common Sandbox Settings of Firefox browsers, which can be used as a reference for operations during leisure time. On October 16, August 2015, security expert Cody Crews

Prohibit computer sharing of files, prohibit domain users from sharing files, prohibit sharing computer filesTo disable network sharing, disable network sharing, and prohibit users from sharing folders, use the following methods:First, check whether

Android Trustzone Privilege Escalation Vulnerability (CVE-2015-6639)Android Trustzone Privilege Escalation Vulnerability (CVE-2015-6639) Release date:Updated on:Affected Systems: Android Android 6.0 ( Description: CVE (CAN) ID:

FFmpeg ff_get_buffer Function Denial of Service Vulnerability (CVE-2015-8663)FFmpeg ff_get_buffer Function Denial of Service Vulnerability (CVE-2015-8663) Release date:Updated on:Affected Systems: FFmpeg Description: CVE (CAN) ID: CVE-2015-866

P2P financial security: multiple design defects, such as password reset at jingjinlian (verification and repair are required) Packed Http://android.myapp.com/myapp/detail.htm? ApkName = com. jjlUpdated on: version 1.0.2, 2016.3.17Download and

Medical inquiry a website has the SQL Injection Vulnerability (DBA permission) I want to explain to you what is "Single Love". The so-called "Single Love" means that you have sentenced me to the final death penalty in your heart, and I have

Execute arbitrary code in the Jinja2 template using the Python feature Whether the Jinja2 template engine can directly execute the original command in SSTI is not described, and it is also described in the official Jinja2 documentation that the

Weak password and SQL injection vulnerability in a system background in CNTV Punching... Weak password and SQL injection in the management background of CNTV network TV Station  http://115.182.9.39/mp/login.html Because the verification code of the

Handle online master site SQL injection (bypassing the filtering mechanism) Handle online master site SQL injection (bypassing the filtering mechanism) POST /ajax/address.php?modify=m HTTP/1.1Host: www.lashou.comUser-Agent: Mozilla/5.0 (Windows NT 6.

SQL injection vulnerability in a third-party website of zhongke The SQL injection vulnerability in the third-party website of CEN.Address: POST injection at http://fax1.sfn.cn/Admin/login.aspx login:  POST /Admin/login.aspx HTTP/1.1Host:

Midea's sales company's bar code system (formal environment) has command execution. Getshell can roam more than 50 machines through the Intranet. Sales Company barcode System (official environment) Http://rdbcs.midea.com.cn: 8000/  JAVA

A system of jiangtai insurance has SQL injection (supporting union involving millions of data) SQL Injection **. **/Indexlis. jsp    python SQLMap/SQLMap.py -u "**.**.**.**/common/cvar/CExec.jsp" --data

Leakage of employee contact information of sensitive information in China tietong system/no need to log on to getshell China tietong employee contact information leakage of sensitive information in a system + session leakage + weak password + mysql

DVWA Series 16 File Inclusion Vulnerability mining and defense Next we will analyze the source code of the File Inclusion Vulnerability in DVWA.The main page of the file is the D: \ AppServ \ www \ dvwa \ vulnerabilities \ fi \ index. php file. The

Shenzhou.com delivery treasure Getshell exposes millions of information and can detect 89 internal network hosts. RT Http: // 202.108.145.58/default/  JAVA deserialization Command Execution Vulnerability  Intranet IP Address  Directly write

The Asia Pacific Daily website has the SQL Injection Vulnerability (sensitive information \ can enter the background Getshell) The Asia Pacific Daily News Agency is sponsored by the Asia Pacific General branch of Xinhua News Agency (Xinhua News