Cloud Security

Android Service Security0x00 Popular Science A Service is an application component that has no interface and can run on the background for a long time. other application components can start a service and run on the background, even if the user

Avira's anti-virus software upgrade process has defects (which can be exploited by man-in-the-middle attacks to implant Trojans) The latest version (14.0.7.468) of Avira anti-virus software can be exploited by man-in-the-middle during the upgrade

GHOST Vulnerability (GHOST) affects a large number of Linux operating systems and their released versions (update and repair solutions) Security researchers recently revealed a critical security vulnerability named GHOST (GHOST), which allows

MiniBB "code" SQL Injection Vulnerability Release date:Updated on: Affected Systems:MiniBB Description:CVE (CAN) ID: CVE-2014-9254 MiniBB is an independent and open-source online forum constructor. In versions earlier than MiniBB 3.1, when "action"

Huawei WS318 predictable random number generator Vulnerability Release date:Updated on: Affected Systems:Huawei WS318Huawei WS318Description:Bugtraq id: 71787 Huawei WS318 is a wireless router product. A predictable random number generator

Anti-Virus Attack and Defense Section 2: Analysis and Prevention of simple TrojansI. Preface in general, Trojans are both client and server. What we discussed last time was just a special case. After all, not everyone knows the doscommand, so now

Anti-Virus Attack and Defense Research: simple Trojan Analysis and Prevention part1I. preface the development of virus and Trojan Horse technologies today, because they are always complementary, you have me and I have you, so the boundaries between

Linux Rootkit detection method based on memory Analysis0x00 Introduction A Linux server finds an exception. For example, it is determined that the Rootkit has been implanted, but the routine Rootkit detection method by O & M personnel is invalid.

JBoss JMXInvokerServlet JMXInvoker 0.3 Remote Command Execution Vulnerability /* * JBoss JMXInvokerServlet Remote Command Execution * JMXInvoker.java v0.3 - Luca Carettoni @_ikki * * This code exploits a common misconfiguration in JBoss Application

12306 the latest verification code can be cracked (it can be applied to the ticket grabbing software) Is this not reported ...... This wonderful verification code can be recognized by a public service for a long time ...... (The Verification Code

Optimistic about your portal-data transmission on the client-adjust the http referer using the browser1. In the Internet, a large amount of data is transmitted through URL parameters. Most of the data is not transmitted through encryption. As I have

TerraMaster NAS Network Storage Server unlimited getshell and other vulnerabilities (poc) Unlimited getshell, add any administrator, download any file, multiple information leaks ..  POST/include/upload. php? TargetDir = .. /cgi-bin/filemanage/HTTP/1

The tipask q & A system bypasses waf SQL Injection in multiple places The system allows the registration of usernames containing backslash ("\"), which can cause multiple SQL Injection Vulnerabilities, because the system has 360WAF defense, WAF

PHPCMS v9 super Security tutorial I. directory permission setting is very important: it can effectively prevent hackers from uploading trojan files. If you use chmod 644 *-R, the PHP file has no access permission.If you use chmod 755 *-R, the PHP

Exploitation of Truncation in file inclusion and uploadTruncation may be applicable in the following situations:Include (require)File_get_contentsFile_existsAll url parameters can be controlled by % 00 0x01. Local file inclusion 1.1 truncation type:

Top-web SQL blind Note 3 core library contains thousands of tables and Solutions Blind SQL injection to the top network affects four core databases. An important database contains thousands of tables.Cloud computing and big data are all Keywords of

07073 game network root injection: 5 k tables on all websites, hundreds of databases can be written to shell 2 Website Tieba1_7073.com This is time based sqli.POC POST /home/getstatus/ HTTP/1.1Host: tieba.07073.comUser-Agent: Mozilla/5.0 (Windows NT

How to Use Dominator to discover DOM-based XSS vulnerabilities on Nokia Official Website Background DOM-based XSS (Cross-Site Scripting) vulnerabilities are generally difficult to find. In this article, the author uses Dominator to discover and

China Unicom SMS phone bill notification link leakage user information China Unicom SMS Call Notification provides a link. By changing the URL, You can query the purchase records of other users' mobile phone numbers (which may be accurate to the

Geek Park official website administrator Cookie leakage directly into the background and Solution   Geekpark.netA few months ago, the WooYun salon connected the same WiFi with the reporter sister of geek Park and caught her Cookie with the dSploit