Cloud Security

Technical Analysis of Java deserialization Vulnerability1. Background of Java deserialization Vulnerability In short, serialization refers to the process of converting the object state to a format that can be kept or transmitted (bytestream ). In

Android Trustzone Privilege Escalation Vulnerability (CVE-2015-6639) Affected Systems:AndroidDescription:CVE (CAN) ID: CVE-2015-6639Android is a mobile phone operating system based on the Linux open kernel.In Android 5.1.1 and LMY49F versions 5.x

Android mediaserver Remote Code Execution Vulnerability (CVE-2015-6636)Android mediaserver Remote Code Execution Vulnerability (CVE-2015-6636) Release date:Updated on:Affected Systems: Android Android 6.0 ( Description: CVE (CAN) ID: CVE-2015-6

Malicious programs turn infected computers into Web proxies Anonymous proxy is vital to protecting users' online privacy, but it is dangerous if a person's computer becomes a proxy server without consent. Researchers from the security company Palo

Honeywell 93gas Detector Path Traversal Vulnerability (CVE-2015-7907) Affected Systems: Honeywell Midas gas detectors Honeywell Midas Black gas detectors Description: CVE (CAN) ID: CVE-2015-7907 Midas and Midas Black gas detectors are detectors

Vanke lives here. The APP resets the password of any user. Vanke lives here. The APP resets the password of any user. Download the official website app http: // **. **/Feedback. aspxTake 13888888888 as an example to testForgot password-> burp packet

How to establish an Internet risk control system I have been a startup for more than half a year. Over the past six months, I have been tired and productive, with pain and happiness. I don't have to mention it any more. It should be a common feeling

Principle of HTTP escape: using HTTP 0.9 for bypass   This is the first article in the HTTP escape series. Most firewalls only block packets that are incorrectly identified by rules. Therefore, data packets that cannot be understood by the firewall

A Xiaomi Video Phone vulnerability allows you to view background operation data The latest Xiaomi system has an additional Xiaomi video phone number, which allows you to directly view background operation data. Directly open the video phone

Six basic policies that need to be understood before building a cloud security system     Cloud adoption is unstoppable, but an endless stream of security events also put an important issue in front of every CIO and Security Department-in a more

Alibao API exposes sensitive information of all investors (mobile phone number and investment amount) Financial Product Investment records leak investors' mobile phone numbers GET the investment record url for the web app:

A vulnerability exists in a core system of Yanzhao property insurance. The getshell Intranet affects hundreds of thousands of messages. Yan Zhao property insurance was approved by the China Insurance Regulatory Commission in December 3, 2013 with a

Weak Lily net password causes a large amount of internal employee information leakage Weak passwords on a platform of Lily net cause a large amount of internal employee information leakagePS: President, what are the targets? Http://oa.baihe.com: 3220

96wan game platform storage vulnerability # Involving 0.3 million users (ID card # name # email, etc) Injection address  # SQL Injection URL: http://www.96wan.com/websiteapi/website_serverlist? Gid = 6 parameter gid controllable  Six databases

Yonyou FE collaborative Office Platform System Union Injection Vulnerability A system of UFIDA does not strictly filter the data, resulting in union injection. Arbitrary data can be obtained. The yonyou FE collaborative office system does not

China Telecom Tianyi Platform System Vulnerability Getshell (Multi-province package submission) Who is Joker? Http: // **. **/login/userlogin WebPath:/data/www/terminal_jl/JilinHttp: // **. ** // login/userlogin

My contribution to my alma mater is to see how I can get water and electricity fees for the whole school. Our school stands for GuoguangAlthough I have graduated, I am still very concerned about my Alma Mater. I have seen that my school's self-help

Guangxi Education and Training Network Arbitrary File Upload from getshell to intranet fall Guangxi Education and Training Network Arbitrary File Upload from getshell to intranet fallDetailed description: Http ://**.**.**.**/First, googleSite: **. **

Xcode 7 Bitcode workflow and Security Evaluation With the release of Xcode 7, Apple added a new feature Bitcode [1] For Xcode:   New features often mean new attack surfaces. This article first introduces Bitcode and Bitcode-related workflows. After

ARP spoofing technology-obtain images of the Intranet destination IP addresses accessing the QQ space The article is for study only. do not violate the law. Requirement: Virtual Machine Kali linux SystemCommand "ip query command: ifconfigecho