Cloud Security

CubeCart "first_name"/"last_name" Cross-Site Scripting VulnerabilityCubeCart "first_name"/"last_name" Cross-Site Scripting Vulnerability Release date:Updated on:Affected Systems: CubeCart Description: CVE (CAN) ID:CubeCart is an open-source

Hackers have quietly moved the attack direction to the mobile platform.     Unlike computers, mobile phones store various types of user information, including email addresses, personal sensitive information, and bank information. Based on this,

Be alert for attacks with CVE-2015-2545 VulnerabilitiesPreface Recently, APT Warning Platform captured an attack sample, after analysis, the sample seems to use CVE-2015-2545 for attacks, and has a high level of attacks.Analysis This sample is

The malicious trojan virus is rampant. The Client virus has infected more than 70 thousand people. The malicious trojan virus is rampant. Can you hold your wallet? In the second half of 2015, the cheetah mobile security lab and the AVL mobile

Talking about the "cunning" USB Trojan: A system that threatens physical isolation     It is reported that a type of USB Trojan is found to be difficult to detect and analyze. The security vendor ESET security researchers initially discovered that

How to retrieve the encryption program password Recently, a friend told me that he forgot the password of the encryption program. There is a lot of important information in it. I hope I can help him retrieve the password. I thought I just clicked

Mysql error injection Principle Analysis (count (), rand (), group) 0x00 questions I have been using the mysql database to report an error injection method, but why does it report an error? Baidu, Google, knows about it and finds that everyone

Password Reset for any user due to design logic Defects RT Https://www.pzb.com/view/html/user/forgetPassword.shtml13333333333 Test  Enter any verification code and capture packets  Change to successGo to the password setting page  Set a new

Starling stars FlowEye intrusion-Explanation of WebService application Vulnerabilities WebService is a Web application branch that can execute any function from simple requests to complex business processing. After deployment, other WebService

263 a command execution vulnerability exists in a website of cloud communication. getshell (some user information is leaked) Rt Http: // 211.150.66.21/user. action 263 cloud Communication Management Platform  Jdwp command execution vulnerability in

Hijack users' private message content (bypassing Cross-Domain Policy/bypass) with design defects of everyone) Don't go around during the design. Didn't I find that I ran back to the starting point for half a day? I said it was a bypass. In fact, I

By default, quick ServerSpeeder for Windows allows you to directly log on to obtain a large number of IP addresses. During the Windows version of server guard, an unauthorized user can access the website through packet capture to obtain a large

An interface for password verification in Meituan can be cracked (affecting Meituan merchants and Meituan take-out merchants) An interface for password verification in Meituan can be cracked (hundreds of merchant accounts can be successfully logged

HTTPS-related contentWhy https? HTTP is transmitted in plaintext, which means that any node between the sender and acceptor can know what the content you transmit is. These nodes may be routers and proxies. The most common example is user login. If

Crowdfunding order details page user information can be traversed and leaked The crowdfunding order details page does not have permission to view. According to the order rules, N user information is

Min An Property Insurance Company Limited multiple core system middleware weak password Getshell (many vulnerabilities are not fixed) RT.   1. Core Business System of Min 'an Property Insurance Co., Ltd. Http: // 218.17.200.230: 9004/casserver/login?

Analysis of security problems caused by releasing files to temporary folders Recently, McAfee's advanced Vulnerability Detection System (AEDS) has detected some interesting RTF files that execute "additional" content in the document. In general,

Vision energy OA system JAVA deserialization: getshell Command Execution Getshell and Intranet roaming Vision Energy Technology Co., Ltd. OA systemUrl: http://oa.envisioncn.com  One sentence address: http://oa.envisioncn.com/tk/tx.jspPassword 110 

Common Anti-crawler and Countermeasures for websites In our PREDICTION Article on the big data industry in 2016, "in 2016, big data will go down the altar and embrace the opportunities of life capital to favor entrepreneurship", we once mentioned

Seven response analysis methods in WEB Fuzz WEB application fuzzy testing (WEB Fuzz) is a special form of network protocol fuzzy testing, which focuses on network data packets that follow HTTP specifications.WEB Fuzz is not a new concept. At present,