Cloud Security

QEMU ohci_bus_start Function Denial of Service Vulnerability (CVE-2016-2391)QEMU ohci_bus_start Function Denial of Service Vulnerability (CVE-2016-2391) Release date:Updated on:Affected Systems: QEMU Description: CVE (CAN) ID:

Google Chrome Race Condition Vulnerability (CVE-2016-1670)Google Chrome Race Condition Vulnerability (CVE-2016-1670) Release date:Updated on:Affected Systems: Google Chrome Description: CVE (CAN) ID: CVE-2016-1670Google Chrome is a Web

How to Use FSEvents to detect and delete malicious files on the OS X Platform FSEvemts that supports OS X 10.7 and later versions introduces a function that can detect file directory modification behaviors. FSEvents can use the data provided by the

Multiple Cross-Site Scripting Vulnerabilities in phpMyAdmin (CVE-2016-2043)Multiple Cross-Site Scripting Vulnerabilities in phpMyAdmin (CVE-2016-2043) Release date:Updated on:Affected Systems: PhpMyAdmin 4.5.4> 4.5.xPhpMyAdmin 4.4.15.3> 4.4.x

Nettle ecc_256_modq Function Security Vulnerability (CVE-2015-8805)Nettle ecc_256_modq Function Security Vulnerability (CVE-2015-8805) Release date:Updated on:Affected Systems: Nettle nettle> 3.2 Description: CVE (CAN) ID: CVE-2015-8805Nettle

Android app security risks of loading DEX files externally1. Risks of loading DEX files externally The Android system provides the DexClassLoader, which can dynamically load and interpret and execute DEX files contained in JAR or APK files at

Prohibit computer sharing of files, prohibit LAN sharing of files, and prevent copying shared filesSometimes to protect the security of computer files, we need to disable computer sharing and block LAN shared file access. The specific settings are

Technical Analysis of Java deserialization Vulnerability1. Background of Java deserialization Vulnerability In short, serialization refers to the process of converting the object state to a format that can be kept or transmitted (bytestream ). In

SQL Injection for an important website of Tom Online     POST /redeem/tom_ecardExchange.php HTTP/1.1Content-Length: 191Content-Type: application/x-www-form-urlencodedX-Requested-With: XMLHttpRequestReferer: http://tangyuan.tom.com/Cookie: PHPSESSID=0

Talking about advanced combination technology to create a perfect webshell   0x00 Introduction I have previously written an article about Client phishing: Using powershell Client for effective phishing, in the process of using each Client for

Hero mutual entertainment weak passwords in SQL injection at the background of a website (the number of game user data involved in a gun battle is unknown) Take the small vendor-before getshell, It would be 2 rank AH (some of the information is also

Didi kuaidi Smart Travel platform (cangqiong) SQL Injection Vulnerability The web interface of Didi kuaidi Smart Travel platform has the SQL injection vulnerability. Didi fast intelligent travel platform data interface has obvious SQL injection

Learning web security from scratch (1) I have always been interested in web security, but I have always understood a little bit. I decided to learn about web security from now on and update the web Security Series. The content of this article is

Broadlink smart ecosystem vulnerability details With the rapid development of consumer electronic devices and the delivery of Iot in our daily lives, chip manufacturers and a large number of smart device entrepreneurial teams have increased

An unauthorized Baidu system causes the Intranet Database Server to fall (mysql takes shell in linux) @ Sky: I changed the folder. Vulnerability address: http: // 180.149.144.247/phpmyadmin (accessible directly)Corresponding to Baidu takeout

China Telecom Jiangxi main site can be accessed by getshell over waf Verify getshell Address: http ://**. **. **. **/res/active/4G/upload. jsp (login required) Upload Vulnerability is also installed with security software, so I killed all my

Hpe ucmdb Browser Vulnerability (CVE-2015-6862) Affected Systems:Hp hpe ucmdb Browser (4.02)Description:CVE (CAN) ID: CVE-2015-6862Hpe ucmdb Browser is a lightweight Web client that accesses UCMDB data.Hpe ucmdb Browser 4.02 and earlier versions

No unauthorized access to student information (involving 54 driving schools) With more than 10 years of experience in the construction and maintenance of the driving school system, the development team that understands driving schools cannot help

A marketing system of China Telecom has excessive permissions to view a large number of users' winning information and Prize Code (such as adding and managing activities) More... RightDetailed description: **. **/Admin/index. jspAdd Activity

Unveil the secrets of XSSI attacks Same-origin policy The same-origin policy is a well-known security policy proposed by Netscape. All supported nowJavaScriptAll browsers use this policy. The so-called same source means that the domain name,