Cloud Security

Yuantong express android client has severe design defects and can reset any User Password Android client of yuantong ExpressLatest Version3.2.2Reset any User PasswordDetailed description: 1. Target APP: yuantong express delivery android ClientLatest

2345 view tuwang's Remote Code Execution Vulnerability (with vulnerability POC) 2345 view the Remote Code Execution Vulnerability of tuwang.(Young man, I think you are surprised by the bones. This amazing photo is for you for free)Detailed

CloudBees Jenkins cross-site scripting (CVE-2015-5326)CloudBees Jenkins cross-site scripting (CVE-2015-5326) Release date:Updated on:Affected Systems: CloudBees Jenkins CloudBees Jenkins Description: CVE (CAN) ID: CVE-2015-5326CloudBees

QEMU hw/virtio. c DoS Vulnerability (CVE-2015-7295)QEMU hw/virtio. c DoS Vulnerability (CVE-2015-7295) Release date:Updated on:Affected Systems: QEMU QEMU Description: CVE (CAN) ID: CVE-2015-7295QEMU is an open source simulator software.QEMU

Wind River VxWorks Integer Overflow VulnerabilityWind River VxWorks Integer Overflow Vulnerability Release date:Updated on:Affected Systems: Wind River Systems VxWorks 5.5-6.9.4.1 Description: VxWorks is a real-time operating system widely

QEMU Heap Buffer Overflow Vulnerability (CVE-2015-5225)QEMU Heap Buffer Overflow Vulnerability (CVE-2015-5225) Release date:Updated on:Affected Systems: QEMU Description: Bugtraq id: 76506CVE (CAN) ID: CVE-2015-5225QEMU is an open source

Isc bind 'name. c' Remote Denial of Service VulnerabilityIsc bind 'name. c' Remote Denial of Service Vulnerability Release date:Updated on:Affected Systems: Isc bind 9.7.1ISC BIND Description: Bugtraq id: 76115CVE (CAN) ID: CVE-2015-4650BIND

Multiple IBM DB2 product file leakage vulnerabilities (CVE-2015-8910)Multiple IBM DB2 product file leakage vulnerabilities (CVE-2015-8910) Release date:Updated on:Affected Systems: IBM DB2 9.8-FP5IBM DB2 9.7-FP10IBM DB2 10.5-FP5IBM DB2 10.1-FP5

Oracle Solaris local vulnerability (CVE-2015-2631)Oracle Solaris local vulnerability (CVE-2015-2631) Release date:Updated on:Affected Systems: Oracle Solaris 11.2Oracle Solaris 10 Description: Bugtraq id: 75855CVE (CAN) ID:

Apple Mac EFI Memory Corruption Vulnerability (CVE-2015-3693)Apple Mac EFI Memory Corruption Vulnerability (CVE-2015-3693) Release date:Updated on:Affected Systems: Apple OS X Description: CVE (CAN) ID: CVE-2015-3693IOS is an operating system

Layer 2 attacks against Python Network Attacks 0x00 Abstract In Layer 2 attacks in this chapter, we will go to the fantastic journey of network hacking. Let's review that the second layer is responsible for sending packets over Ethernet using MAC

Vulnerability Management e-stream 0x01 PrefaceThis article mainly aims to share and record some of your own growth. If something is not well written, I hope you can still make an ax. In the early days of Vulnerability Management, I personally felt

Windows Security Log Analysis-logparser 0x01 Preface During work, especially in emergency response, when you encounter security events related to windows domain control intrusion, you often need to analyze windows security logs, which are usually

NodeJs backdoor program 0x00 Preface Start with the language to write a program that does not exist in the market.0x01 why NodeJs? I personally love the JavaScript language, and what we are talking about today is NodeJS, a branch of the JavaScript

Shanghai Greenland Shenhua Football Club official website has SQL injection (DBA permission) Rt. Shanghai Greenland Shenhua Football Club official website:Http ://**.**.**.**The vulnerability exists in:Http: // **. **/news. php? Category = 41Http: //

Webshell Security Detection (2)-deep into the user's heart1. What is WEBSHELL? What does it mean? What is Webshell from different perspectives?Programmer: an executable web script file. It means a script. Hacker: something that can be used to

SQL Injection risks -- a Login wins the Server   This article describes basic SQL injection techniques, harms, and solutions. The technology is a little scum, so do not spray it ....I. databases. Only one Admin table is created with the following

A vulnerability has fallen into eight business systems of Beijing chain home real estate brokerage Co., Ltd. Http://tc.homelink.com.cn/Login.aspxLogin logic vulnerability exists, causing the administrator password to leak. This entry is routed to

A simple internal network penetration is included in an interesting file on a site under the chain home (getshell is included in local files) Should there be no similar cases in the past? One day, the partner in the group lost a

Hacking Team monitoring code analysis Hacking Team leaked a lot of monitoring code. For example, Soldier, a spyware program on Windows, is used to illegally listen to users' online information and local information. Let's analyze this project today.