Cloud Security

The process of detecting reflective, storage, and DOM vulnerabilities in the Google collaborative community (GWC) Google Work Connect (GWC) is a Community system composed of systems, application administrators, and partners. It is also within the

UXSS vulnerability caused by logical defects in Android and QQ browsersI. Vulnerability description The X5 kernel of the QQ browser used by both the Android platform and the QQ browser has a logic defect in ip address processing and domain name

Simtrace: exploring the world of SIM cards 0 × 00 about SIM card As we all know, SIM card is a small card inserted on a mobile phone. It is called the Subscriber Identity Module customer recognition Module. However, not many people in the world know

Isc bind buffer. c DoS Vulnerability (CVE-2015-8705)Isc bind buffer. c DoS Vulnerability (CVE-2015-8705) Release date:Updated on:Affected Systems: Isc bind 9.10.x Description: CVE (CAN) ID: CVE-2015-8705BIND is a widely used DNS protocol.Isc

Analysis on the trojan evolution Report of "Dancing moth"I. Overview Recently, the 360 mobile security team detected that a cloud Control Trojan was exploding. The trojan family was first captured by February 2015 mobile security teams in 360, and

PowerPoint custom operations to trigger malicious Payload instead of macros When analyzing recent phishing attacks, we found that attackers started to use PowerPoint custom operations to trigger malicious Payload instead of macros. Although the use

Tonglian payment: Improper configuration of an important system in a province weak tomcat password affects 23 million Card swiping consumption information \ 5.82 million bank card information, etc. Rt   Mask Region 1.http://**.**.**/gdrWeb/

A business spree in Phoenix has multiple vulnerabilities (SQL, stored XSS, and sensitive information) RTRT Http: // ***** response? Keyword = _**Parameter keyword _0, 1), floor (rand (0) * 2) x from information_schema.tables group by x))      'And

In those years, we will explore the global protection of SQL injection and the second injection of Bypass.0x01 background Currently, WEB programs basically have global filtering for SQL injection, such as enabling GPC in PHP or common in global

The weak password Getshell exists in multiple core systems of Min 'an Property Insurance Co., Ltd. 1. Core Business System of Min 'an Property Insurance Co., Ltd.Http: // 218.17.200.230: 9004/casserver/login? Service = http % 3A % 2F % 2F218. 17.200

In those years, we will explore the global protection of SQL injection and the UrlDecode of Bypass.0x01 background Currently, WEB programs basically have global filtering for SQL injection, such as enabling GPC in PHP or common in global files. use

Analysis of security problems caused by releasing files to temporary folders Recently, McAfee's advanced Vulnerability Detection System (AEDS) has detected some interesting RTF files that execute "additional" content in the document. In general,

Magento The magento XSS vulnerability is not introduced. Baidu is everywhere. Here, we will simply record the processing process (relatively crude, whether it is valid or not, not verified) Edit App/design/adminhtml/default/template/sales/order/

Multiple SQL injection vulnerabilities on ruiming medical master site cause Sensitive Information Leakage RT Chengdu ruiming Medical Information Technology Co., Ltd. is a high-tech enterprise dedicated to researching, developing, producing and

Ping An Da tengfei express found that Shell involves a large number of parcel information including the main site data. Information Leakage of tens of millions of parcels and many Database backups **. **: 8080/oa/login. jsp  The shell address is:**.

Common Anti-crawler and Countermeasures for websites In our PREDICTION Article on the big data industry in 2016, "in 2016, big data will go down the altar and embrace the opportunities of life capital to favor entrepreneurship", we once mentioned

Getshell (root permission affects Intranet/database information leakage) caused by command execution vulnerability in a site of yisearch Technology) Rt Http: // 120.197.138.35/will jump to http://book.easou.com/  Jdwp command execution

SQL injection vulnerability exists in multiple sites of Chengdu yichuang WWW (package submission/script) Multiple SQL Injection Vulnerabilities in Chengdu yichuang WWW Main Site The Chengdu yichuang WWW master site has multiple SQL Injection

Tickets passed Multiple Vulnerabilities (SQL injection, command execution, and deserialization) Multiple Vulnerabilities (SQL injection, command execution, and deserialization) 1> InjectionURL: http: // 119.254.105.143/ticket/web. go? Method =

How to handle ntp server exceptions Preface: First, what is a reflection amplification attack? NTP is transmitted over UDP, so the source address can be forged.There is a type of query command in the NTP protocol. A short command can be used to send