Cloud Security

CVE-2015-3795   Http://blog.wuntee.sexy/CVE-2015-3795/ 0x00 background This vulnerability was reported to Apple in June 4. This vulnerability was fixed in the 10.10.5 security update released on April 9, August 13. Related information:Apple

Webshell series (5)-Analysis of webshell's "visibility" capability 1. Typical attack sequence diagram of webshellIt is a typical webshell attack sequence diagram. It uses web vulnerabilities to obtain web permissions, upload pony, install Trojan,

Giflib giffix Heap Buffer Overflow Vulnerability (CVE-2015-7555)Giflib giffix Heap Buffer Overflow Vulnerability (CVE-2015-7555) Release date:Updated on:Affected Systems: Giflib Description: CVE (CAN) ID: CVE-2015-7555Giflib is a library and

Joomla deserialization vulnerability getshell & Command Execution Note:1. Remember to add points after the command. The command is enclosed in single quotes.2. It is only for learning php code.Usage:Php joomla. php http://xatusec.org getshellPhp

Yuantong express android client has severe design defects and can reset any User Password Android client of yuantong ExpressLatest Version3.2.2Reset any User PasswordDetailed description: 1. Target APP: yuantong express delivery android ClientLatest

In-depth analysis of Commons Collections Java deserialization Vulnerability0x01 background So far this year, the most influential Java vulnerability is the CommonsCollections deserialization vulnerability that has been booming for some time. @

Android SystemUI Privilege Escalation Vulnerability (CVE-2015-6621)Android SystemUI Privilege Escalation Vulnerability (CVE-2015-6621) Release date:Updated on:Affected Systems: Android Android 6.0 Description: CVE (CAN) ID:

Android ARM 32-bit 0x00 The full name of drop is Return-oriented programming, which is an advanced memory attack technology, it can be used to bypass various universal defenses of modern operating systems (such as memory unexecutable and code

Secrets behind the Wolf: an in-depth analysis of a malicious trojan A type of malicious virus is recently captured by the hab analysis system. The virus loads malicious sub-packages, downloads the root tool to obtain root privileges, installs

Brief Analysis of A DDoS Trojan This article is a foreign researcher's analysis of a DDoS Trojan. the MD5 of the Trojan file is 67877403db7f8ce451b72924188443f8. Install There are two subprograms in the main function of the malware to check whether

Live800 customer service system Arbitrary File Download Vulnerability A vulnerability is detected by hackers. Many large manufacturers are using the vulnerability, which is very harmful. Fuzz generates a downlog. jsp file on the live800 customer

A password management database may be leaked due to improper configuration of sogou. A password management database may be leaked due to improper configuration of sogou. Phpmyadmin has a setup. If the configuration is incorrect, you can directly

A rare loophole in giants (making you the richest person in the journey) Maybe I'm a little surprised at the moment. Giant Mall journey this can change point card, feel a little interesting, continue to look downThen I was surprised to find out

Vulnerability of free cheetah wifi driver Liebaonat_xp.sys, a free Wi-Fi computer version of cheetah, has the arbitrary address Write vulnerability. The write address can be controlled to execute arbitrary kernel commands. When the IoControlCode

Node. js Remote Memory leakage Vulnerability Recently, vulnerabilities have been found in the ws module that allows users to simply send ping data frames to allocate memory. This vulnerability will reject data sending requests and invalidate the

Any mobile phone number registration and Password Reset No vulnerability exists in the vulnerability list. The first vulnerability is 20RANK. The phone Verification Code obtained for registration and password resetting is four digits, and there are

No unauthorized access to student information (involving 54 driving schools) With more than 10 years of experience in the construction and maintenance of the driving school system, the development team that understands driving schools cannot help

A marketing system of China Telecom has excessive permissions to view a large number of users' winning information and Prize Code (such as adding and managing activities) More... RightDetailed description: **. **/Admin/index. jspAdd Activity

SQL injection vulnerability in tongjin cube of financial stocks (affecting the security of stock information leakage) Detailed description: Client.mfniu.com was found to have the SQL injection vulnerability in the earlier version of phpcms v9

The SQL injection vulnerability in a housing provident fund management system is of high permissions. Ben diaosi saw the high-rise buildings on the floor outside the window, but he did not have his own one square meter. He saw the Provident Fund