Cloud Security

Cisco announced it would check whether the software contains backdoor code After Juniper's firewall product NetScreen finds two backdoors, Cisco announced that it would re-examine its software in case it contains backdoor code. The backdoors of

One week PowerShell script Day 3: HTTPS script Welcome to the third day of the week's PowerShell script. Today we will discuss HTTP/HTTPS.We usually use HTTPS for security considerations. It is precisely because of this that HTTPS traffic is often

A sogou Intranet has Struts2 command execution (discuz! Application Instance) A sogou Intranet has Struts2 command execution (discuz! Application Instance)Detailed description: Http://bizhi.sogou.com/bbs/ is discuz! Vulnerability.Multiple SSRF

Easy access to company master router control permission note Let's talk about the background first. The company where the blogger is located is an advertising company, which was recently relocated. In order to save costs, I pulled a 50 m Unicom

ZTE Huawei Guangda text router/CAT found 0-Day Vulnerability Security researchers found a large number of zero-day vulnerabilities in two routers and six modem products produced by ZTE, Huawei, Guangda, and text technology, attackers can launch

Cisco Unity Connection XSS Vulnerability (CVE-2015-6390)Cisco Unity Connection XSS Vulnerability (CVE-2015-6390) Release date:Updated on:Affected Systems: Cisco Unity Connection 9.1 (1.10) Description: CVE (CAN) ID: CVE-2015-6390Cisco Unity

Apache HttpComponents HttpClient DoS Vulnerability (CVE-2015-5262)Apache HttpComponents HttpClient DoS Vulnerability (CVE-2015-5262) Release date:Updated on:Affected Systems: Apache Group HttpComponents HttpClient 〈 4.3.6Apache Group HttpComponents

PolarSSL Heap Buffer Overflow Vulnerability (CVE-2015-5291)PolarSSL Heap Buffer Overflow Vulnerability (CVE-2015-5291) Release date:Updated on:Affected Systems: PolarSSL 1. x-1.2.17 Description: CVE (CAN) ID: CVE-2015-5291PolarSSL (mbed TLS)

MediaWiki contrib/cssgen. php XSS Vulnerability (CVE-2015-6734)MediaWiki contrib/cssgen. php XSS Vulnerability (CVE-2015-6734) Release date:Updated on: 2015-09-02Affected Systems: MediaWiki MediaWiki MediaWiki Description: CVE (CAN) ID: CVE-20

5 cents to build your own Throwing Star LAN Tap Cause: The WEB "Wang" was boring to write PHP code at home on weekends. I was thinking about something interesting. I saw Throwing Star LAN Tap, but I didn't have time to play it, eager to open a

MSSQL Intranet penetration Environment: 2003 SERVER IIS: 6.0 supports php Databases: MSSQL and MYSQL Website type: ASPX This article focuses on the Intranet penetration elevation, which is not described for WEBSHELL. Anyone who knows about intrusion

Baidu uses the "high-speed rail" keyword to Promote fraud This person searched a Chinese bullet train in Guangzhou at an Internet cafe in Guangzhou to see the figure. I am in a hurry to go out. I believe Baidu too much.Baidu company, why did you

Reverse basic OS-specpacific (2) Chapter 65 local thread storage TLS is a unique data area of each thread. Each thread can store the data they need here. A famous example is the standard C global variable errno. Multiple Threads can use errno to

Webshell Security Detection (3)-Discover "unknown webshells" based on Behavior Analysis"1. "known" or "unknown" Known, known, unknown, and unknown, the security industry has talked a lot recently. Currently, the hot "threat intelligence" in the

SQL injection error reported for DBA permissions at a location in the giant Network An error message for injection of DBA permissions at a location in the giant Network POST/admin/login. php HTTP/1.1Content-Length: 87Content-Type:

SQL Injection Quick Start v1.0 (continuous update) Note: All the quotation marks in this article are Chinese quotation marks for aspect viewing.1. Step 1: Introduction to common databases ASP + access ASP + mssql PHP + mysql Like this link

PfSense XSS vulnerability analysis PfSense is an open-source network firewall software based on FreeBSD operating system. It has been widely used by companies around the world to protect its infrastructure.Last year, we found some security

Research on the Utilization posture of a secondary injection in ECSHOP   I recently encountered ECSHOP During Penetration and searched the internet. The new vulnerability was the two injections submitted by wooyun dark Ranger. ECSHOP latest full

Windows Website security dog upload interception bypass Website security dog's upload interception on win bypasses Upload code: When the uploaded file extension contains some special characters (such as bypass. php? X, here X represents

User data leakage caused by SQL injection of watch house User data leakage caused by SQL injection of watch house  Http://s.xbiao.com/list? City_name = % E5 % 8C % 97% E4 % BA % AC & brand_id = 6 (GET)  Web application technology: Apache, PHP