Cloud Security

Adobe ColdFusion Arbitrary Command Execution Vulnerability (CVE-2016-1114) (APSB16-16)Adobe ColdFusion Arbitrary Command Execution Vulnerability (CVE-2016-1114) (APSB16-16) Release date:Updated on:Affected Systems: Adobe ColdFusion & lt; 2016

QEMU ehci_process_itd Function Denial of Service Vulnerability (CVE-2015-8558)QEMU ehci_process_itd Function Denial of Service Vulnerability (CVE-2015-8558) Release date:Updated on:Affected Systems: QEMU Description: Bugtraq id: 80694CVE (CAN)

Apple iOS IOHIDFamily Memory Corruption Vulnerability (CVE-2016-1748)Apple iOS IOHIDFamily Memory Corruption Vulnerability (CVE-2016-1748) Release date:Updated on:Affected Systems: Apple iOS Description: CVE (CAN) ID: CVE-2016-1748IOS is an

Which methods can bypass PowerShell Execution Policy? By default, PowerShell prohibits PowerShell scripts from being executed in Windows. This will impede penetration testers, system administrators, and developers ...... Here, I will bypass

FFmpeg 0-day vulnerability allows attackers to remotely steal local files FFmpegg, a widely used open-source multimedia framework, discovers a 0-day vulnerability that allows attackers to remotely steal local files. Popular FFmpeg applications

Deep Analysis of JavaScript Backdoors 0x00 background Previously, the article JavaScript backdoorof @ san mentioned how to use rundll32.exe to execute a JavaScript code to bounce an Http Shell. Here, I will share with you the article on the

PowerPoint custom operations to trigger malicious Payload instead of macros When analyzing recent phishing attacks, we found that attackers started to use PowerPoint custom operations to trigger malicious Payload instead of macros. Although the use

Principle of Trojan wall-mounting If the network is not too stable, people will set up firewall to defend against network attacks. Isn't this a huge challenge for the survival of our Trojans? Competing for things, survival of the fittest, well... to

PHP Utility Belt Remote Code Execution Vulnerability Verification and analysis PHP Utility Belt is a set of tools used by PHP programmers. It can be used to test regular expressions and observe the matching with the preg_match and preg_match_all

Medical inquiry a website has the SQL Injection Vulnerability (DBA permission) I want to explain to you what is "Single Love". The so-called "Single Love" means that you have sentenced me to the final death penalty in your heart, and I have

Can I send a "red envelope" to control others' QQ accounts? (Demonstration using QQ mail/xss not required) How do I send a "red packet" to control others' QQ messages (using QQ mail as a demonstration/xss is not

Weak password and SQL injection vulnerability in a system background in CNTV Punching... Weak password and SQL injection in the management background of CNTV network TV Station  http://115.182.9.39/mp/login.html Because the verification code of the

A system vulnerability of Air China causes Getshell to affect host security. Getshell caused by a system vulnerability of Air China in aviation security (Nmap can detect Intranet impacts on a large number of hosts)A small vulnerability that causes a

Thoughts and Countermeasures on Database theft and credential stuffing Database theft refers to the theft of the website database by hackers. Credential stuffing refers to the attempts by hackers to log on to other websites in batches using the

Second Quarter of Ukrainian power grid attack A wave of ups and downs. The Ukrainian power grid was interrupted due to a Trojan attack on December 23, 2015. This was the first time that a malicious software attack caused national infrastructure

Spring Airlines multi-System Command Execution Vulnerability Spring Airlines multi-System Command Execution Vulnerability Https: // 180.153.27.9/  Http:/// 180.153.27.154: 7001/Production Ground Support SystemHttp: // 210.51.48.123/login.

Alibao API exposes sensitive information of all investors (mobile phone number and investment amount) Financial Product Investment records leak investors' mobile phone numbers GET the investment record url for the web app:

Never authorized access to the Moutai main site can be shell (test environment permissions affect online business ideas) A Chinese, a Japanese, and an American can discuss in which country the wine is good,The Japanese said: Our rice wine is the

Domain penetration-Analysis of Hook passwordchangenoworkflow 0x00 Preface In the previous article, we introduced two methods for maintaining domain control permissions-SSP and Skeleton Key. Both methods need to be implemented by Mimikatz, and there

Symantec released its February 2016 threat intelligence report   According to the latest report in February 2016, one of every 125 emails contains malware. Based on data from the Global Intelligence Network (GIN), one of the world's largest threat