Cloud Security

BypassUAC: A Windows UAC bypass Tool     BypassUAC BypassUAC is a tool that uses the built-in AutoElevate backdoor in Windows to break Windows User Account Control (UAC) mechanism. System environment requirements 1. x86-32/x64 Windows 7/8/8.1/10

Privilege Escalation using the Use-After-Free (UAF) vulnerability in the Linux Kernel Last month, the CVE-2016-0728 Local Elevation of Privilege Vulnerability let everyone's eyes again focused on Linux kernel security. Like CVE-2015-3636, CVE-2015-73

Corega CG-WLBARAGM Denial of Service Vulnerability (CVE-2015-7793)Corega CG-WLBARAGM Denial of Service Vulnerability (CVE-2015-7793) Release date:Updated on:Affected Systems: Corega CG-WLNCM4G Description: CVE (CAN) ID: CVE-2015-7793The Corega

Webshell series (5)-Analysis of webshell's "visibility" capability 1. Typical attack sequence diagram of webshellIt is a typical webshell attack sequence diagram. It uses web vulnerabilities to obtain web permissions, upload pony, install Trojan,

A service defect in Chongqing Mobile may be caused by Intranet There are traces of intrusion. Security means that you do not know that what you are using has been hacked. Security means security.I will not go deep into it. After all, I am using my

Google Chrome HTML injection vulnerability in CVE-2015-6784)Google Chrome HTML injection vulnerability in CVE-2015-6784) Release date:Updated on:Affected Systems: Google Chrome Description: CVE (CAN) ID: CVE-2015-6784Google Chrome is a Web

Cisco Unity Connection XSS Vulnerability (CVE-2015-6390)Cisco Unity Connection XSS Vulnerability (CVE-2015-6390) Release date:Updated on:Affected Systems: Cisco Unity Connection 9.1 (1.10) Description: CVE (CAN) ID: CVE-2015-6390Cisco Unity

CloudBees Jenkins Elevation of Privilege Vulnerability (CVE-2015-5323)CloudBees Jenkins Elevation of Privilege Vulnerability (CVE-2015-5323) Release date:Updated on:Affected Systems: CloudBees Jenkins CloudBees Jenkins Description: CVE (CAN)

FFmpeg smka_decode_frame Function Denial of Service Vulnerability (CVE-2015-8365)FFmpeg smka_decode_frame Function Denial of Service Vulnerability (CVE-2015-8365) Release date:Updated on:Affected Systems: FFmpeg FFmpeg FFmpeg FFmpeg

How HTTP Evasions works: Deflate compression bypasses the Firewall This is the second article in the HTTP Evasions series. This article focuses on browsers or other devices that support compression, which may cause firewall bypass. In short, the

Decrypts new information, steals Trojans, and Spymel Recently, the ThreatLabZ security research team found a new family of Trojans, Spymel, which aims to steal information and evade detection by using valid digital certificates.Trojan

Binary files protected by virtual machines in reverse order 0x00 Introduction In code obfuscation, virtual machines are used to run different machine instruction sets on a program. For example, a virtual machine can run the ARM Instruction Set on a

Weak passwords in a CSDN system leak vulnerability information of all projects (including more than usernames/email addresses) Weak Password in http://git.csdn.net/JIRA system, password 1234568148 cuixiang 302 false 45816867 guochao 302 false 458182

Volvo locks can be unlocked without limit in the remote control mode. Hazard: Volvo locks are bypassed by remote control and the locks can be opened infinitely, endangering the security of users' property.Cause: by monitoring and obtaining the

Midea's sales company's bar code system (formal environment) has command execution. Getshell can roam more than 50 machines through the Intranet. Sales Company barcode System (official environment) Http://rdbcs.midea.com.cn: 8000/  JAVA

Due to lax control of the New Oriental account system, Intranet roaming/the boss mode can be enabled (the company has 717 server permissions and databases) What I learned most from wooyun is CAPTCHA human bypass! 1. Entry https://mail.xdf.cnUse the

A system vulnerability package in gionee may leak the IMEI serial number of 3.69 million users (unauthorized access/SQL injection) Export the IMEI serial number file of the 3.69 million user in one click, and calculate 20 rank Http: // 218.16.100.212

Shenzhou.com delivery treasure Getshell exposes millions of information and can detect 89 internal network hosts. RT Http: // 202.108.145.58/default/  JAVA deserialization Command Execution Vulnerability  Intranet IP Address  Directly write

The SQL injection vulnerability in a housing provident fund management system is of high permissions. Ben diaosi saw the high-rise buildings on the floor outside the window, but he did not have his own one square meter. He saw the Provident Fund

Uploading of arbitrary files on a website of chinamoocs affects a large amount of data on the Intranet. Site: http: // 118.26.192.92 the website title is the auxiliary diagnosis and treatment system of the county-level regional health information