Cloud Security

One Community APP and multiple Website Security Vulnerabilities (GetShell) Community APP and website No. 1 have multiple high-risk security vulnerabilities and have obtained all website and server permissions.Detailed description: Community APP and

Recovering hacker attacks from a small number of access logs In the martial arts world, we often mention "bodies can talk", while in the world of cyber attack and defense, logs are the most important means of tracking. Today, we will talk about how

Android SystemUI Privilege Escalation Vulnerability (CVE-2015-6621)Android SystemUI Privilege Escalation Vulnerability (CVE-2015-6621) Release date:Updated on:Affected Systems: Android Android 6.0 Description: CVE (CAN) ID:

Apache WSS4J Information Leakage Vulnerability (CVE-2015-0226)Apache WSS4J Information Leakage Vulnerability (CVE-2015-0226) Release date:Updated on:Affected Systems: Apache Group WSS4J Apache Group WSS4J Description: Bugtraq id: 72553CVE

Arista EOS Remote Arbitrary Code Execution Vulnerability (CVE-2015-8236)Arista EOS Remote Arbitrary Code Execution Vulnerability (CVE-2015-8236) Release date:Updated on:Affected Systems: Arista EOS Arista EOS 4.15-4.15.0FX1.1Arista EOS

FFmpeg ff_hevc_parse_sps Function Denial of Service Vulnerability (CVE-2015-8217)FFmpeg ff_hevc_parse_sps Function Denial of Service Vulnerability (CVE-2015-8217) Release date:Updated on:Affected Systems: FFmpeg FFmpeg Description: CVE (CAN) ID:

PowerDNS Authoritative Server Denial of Service Vulnerability (CVE-2015-5311)PowerDNS Authoritative Server Denial of Service Vulnerability (CVE-2015-5311) Release date:Updated on:Affected Systems: PowerDNS Authoritative Server 3.4.4-3.4.7

IBC Solar ServeMaster Source Code Vulnerability (CVE-2015-6469)IBC Solar ServeMaster Source Code Vulnerability (CVE-2015-6469) Release date:Updated on:Affected Systems: IBC Solar ServeMaster TLP +IBC Solar Danfoss TLX Pro + Description: CVE

Microsoft Office Memory Corruption Vulnerability (CVE-2015-2469) (MS15-081)Microsoft Office Memory Corruption Vulnerability (CVE-2015-2469) (MS15-081) Release date:Updated on:Affected Systems: Microsoft Office 2013Microsoft Office 2010Microsoft

Cisco IOS Software DoS Vulnerability (CVE-2015-4199)Cisco IOS Software DoS Vulnerability (CVE-2015-4199) Release date:Updated on:Affected Systems: Cisco IOS 15.3 S Description: Bugtraq id: 75335CVE (CAN) ID: CVE-2015-4199Cisco IOS is an

Denial of Service Vulnerability (CVE-2015-0744) for Multiple Cisco products)Denial of Service Vulnerability (CVE-2015-0744) for Multiple Cisco products) Release date:Updated on:Affected Systems: Cisco DTA Control System (DTACS) 4.0.0.9Cisco

Android ARM 32-bit 0x00 The full name of drop is Return-oriented programming, which is an advanced memory attack technology, it can be used to bypass various universal defenses of modern operating systems (such as memory unexecutable and code

SQL injection vulnerability in the APP on the official website of hailoan SQL injection vulnerability in the APP on the official website of hailoan Purpose: To detect the APP of good loan network and find SQL injection in the following places:

Unserialize (): vBulletin 5.x. x Remote Code Execution Recently, a vBulletin RCE exploitation and brief analysis were exposed. The cause of this vulnerability is that the vBulletin program uses unserialize () when processing Ajax API calls () the

Javascript Cache Poisoning learning and practice 0x00 cause Not long ago, I bought a wooyun wifi and talked about Cache Poisoning: Then we can see the description of wooyun wifi: By default, this function comes with the cache poisoning function.

Customer Account leakage caused by a management system design defect If you change the bank card information of a customer's account to your own, and then settle... what will happen ........  Http://partner.funshion.com/partner Management SystemNo

Misconfiguration of a certain part of guangshen fa Online Loan Qianhai guangshen FA (http://www.qhgsf.com) is an Internet Financial Service Platform of Shenzhen Qianhai guangshen fa Internet Financial Service Co., Ltd., which was launched in May 8,

Blue Shield smart traffic control management system SQL Injection Vulnerability Blue Shield smart traffic control management system SQL Injection Vulnerability The Blue Shield Intelligent Traffic Control Management System https: //

A weak service password in a business management system of Guohua life insurance caused getshell to be accessible to the Intranet. China Life Insurance Business Management System address: http: // 59.151.39.85/pre/The system uses weblogic middleware

XSS Cookie Theft (DVAW platform test) In the face of the competition, one question was to write a script to receive Cookies, so I simulated the XSS environment. PS: WAF filtering is not considered. First, the XSS is stored. Currently, the DVAW