Cloud Security

How to disable USB flash drives in the registry, how to disable USB flash drives in the Group Policy, and how to disable USB flash drives in the computerTo prevent USB flash disks from being leaked, we sometimes need to disable USB flash disks and

Apple syslogd Elevation of Privilege Vulnerability, affecting many iOS, OSX versions (CVE-2016-1722)     In the latest iOS 9.2.1 update, Apple fixed a code execution vulnerability found in syslogd by two Zimperium zLabs researchers Nikias Bassen and

Google fixed the zero-day Kernel Vulnerability, indicating the problem was not that serious. A privilege escalation vulnerability was detected in the Linux Kernel a few days ago, affecting a large number of Android devices. Due to the

Introduction to shellcode development on Windows (1) This article briefly introduces shellcode development technology and its features. Understanding these concepts can help us write our own shellcode. Further, you can modify existing

3 SQL vulnerability packages in a substation of letao Network (11 databases/may affect more than 800 million users) RT Sites: http://guanli.letao.com/   Injection 1,  Http://guanli.letao.com/wap/shoe.aspx? Add = & iid = 123 & pid = 967243173

Simple Analysis and debugging of CVE-2015-7547 Overflow Vulnerability 0x00 vulnerability information Recently, glibc has a stack overflow vulnerability. For details about the vulnerability, refer to the following link. CVE-2015-7547: glibc

Weak Tianji net password causes Arbitrary File Reading Vulnerability Gift Packs Rt Http: // 219.239.88.138/phpmyadmin  Weak Password root/root  Database Leakage  And phpinfo.  Http: //

A system vulnerability in huatai insurance has problems such as configuration leakage. Shell can threaten the Intranet. St command execution/configuration Leakage 1 # Command ExecutionHttp://shop.ehuatai.com:

The default webserver configuration of a Wi-Fi router in Xiaoyun is harmful. Default webserver misconfiguration vulnerability in the Wi-Fi router of Xiaoyun The small cloud products have default open proxy server ports for the public network. Just

Didi kuaidi Smart Travel platform (cangqiong) SQL Injection Vulnerability The web interface of Didi kuaidi Smart Travel platform has the SQL injection vulnerability. Didi fast intelligent travel platform data interface has obvious SQL injection

Latency injection exists on important sites of the pull Network Punch card GET /wangpiao/checkCinema.php?robId=46&filmid=59674 HTTP/1.1Host: m.lashou.comUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:42.0) Gecko/20100101 Firefox/42.0Accept: text/

Arbitrary SQL Execution Vulnerability (getshell) in the imo cloud Office System) Rt This vulnerability is an SQL injection vulnerability. However, the mysql PDO query system can execute multiple statements, which is equivalent to arbitrary SQL

Arbitrary Password Reset caused by design defects of a substation in sogou Non-violent, second reset. The problem is that sogou cloud testing launched a business a few months ago.Mt.sogou.com  Session coverageUse your mobile phone number to

Yahoo Mail XSS vulnerability details Analysis   This month, Yahoo Mail reported an XSS vulnerability that allows code to be embedded into special-format emails. XSS is automatically triggered when you preview an email. XSS vulnerability affecting

Run the Three-site deserialization command to package the ticket service. Packed up 0x01119.254.105.176: 7001 corresponds to c3.t3.com.cnWeblogic middleware, JAVA deserialization Command Execution Vulnerability  ROOT

Getshell caused by unauthorized access to redis on a website of Phoenix Learn from Pig Http: // 61.155.16 7.220: 843/  61.155.167.220 although redis port 221 is changed, it is still not authorized to access  Http: // 61.155.167.220/test. php

Shopex Open Platform SQL injection and Getshell SQL Injection. BBScan scanned a git information leak: http://open.shopex.cn/.git/ Use the rip-git.pl to download the source code.Source code audit finds an SQL injection:Open.shopex.cn \ core \

Injection of tens of thousands of users (name, password, transaction password, region, mobile phone number, etc) I heard my boss sent an iPhone 6 plus?Injection of another store database to the main site Injection:  python sqlmap/sqlmap.py -u "https:

Tianhong mall app SQL injection (including 380 million + mall user data and 330 million + VIP user data) SQL Injection for APP security Objectives: Tianhong mall red scarf APPCheck that SQL Injection exists in the following places: (injection

Identifies and attacks meterpreter's http or https handler This article will show how to identify the https or http handler of meterpreter, and how to launch DoS attacks (by setting fake sessions between attackers and listeners ).Summary: 1. Request