Cloud Security

Siemens ruggedcom rox-based device NTP Input Validation Vulnerability (CVE-2015-5300) Affected Systems: Siemens ruggedcom rox Description: CVE (CAN) ID: CVE-2015-5300Siemens ruggedcom rox-based devices are used to connect devices in harsh

SearchBlox DoS Vulnerability (CVE-2015-7919)SearchBlox DoS Vulnerability (CVE-2015-7919) Release date:Updated on:Affected Systems: SearchBlox 8.3 Description: CVE (CAN) ID: CVE-2015-7919SearchBlox is a Web-based Attribute search

The "extremely destructive" Kerberos protocol vulnerability can cause the system to be completely controlled. Recently, security experts have discovered a "very destructive" vulnerability in Windows's Kerberos Authentication System. Last year, a

Xcode 7 Bitcode workflow and Security Evaluation With the release of Xcode 7, Apple added a new feature Bitcode for Xcode [1 ]:New features often mean new attack surfaces. This article first introduces Bitcode and Bitcode-related workflows. After

2345 view tuwang's Remote Code Execution Vulnerability (with vulnerability POC) 2345 view the Remote Code Execution Vulnerability of tuwang.(Young man, I think you are surprised by the bones. This amazing photo is for you for free)Detailed

A Kingdee system hits the database and Remote Command Execution . Detailed description: 1. credential stuffing: https://sso.youshang.com/sso/userauthnaction.dow.infinite credential stuffingPacket Capturing, credential stuffing, 123456 Password You

Hands-on implementation of code virtual machines 0x00 what is code Virtualization Virtualization actually I think it is to use a set of custom bytecode to replace the original native commands in the program, and the bytecode is interpreted and

Use Python pickle to execute arbitrary code   A large number of practices have proved that it is very easy to construct malicious pickle, and unpickle operations on malicious pickle may generate a shell or even a remote shell. This article

Android display driver Memory Corruption Vulnerability (CVE-2015-6634)Android display driver Memory Corruption Vulnerability (CVE-2015-6634) Release date:Updated on:Affected Systems: Android Description: CVE (CAN) ID: CVE-2015-6634Android is

Google Chrome DOM bypassing same-origin Policy Vulnerability (CVE-2015-6768)Google Chrome DOM bypassing same-origin Policy Vulnerability (CVE-2015-6768) Release date:Updated on:Affected Systems: Google Chrome Description: CVE (CAN) ID: CVE-201

PCRE pcre_exec Function Denial of Service Vulnerability (CVE-2015-8380)PCRE pcre_exec Function Denial of Service Vulnerability (CVE-2015-8380) Release date:Updated on:Affected Systems: PCRE Description: CVE (CAN) ID: CVE-2015-8380PCRE is a

Remote intrusion into original passenger car (below) 0x01 complete exploitation chain So far, we have discussed many aspects to illustrate how to remotely exploit this jeep and similar models. So far, this information is sufficient for you to make

CSAW2015 finals: Use vDSO rewrite to bypass SMEP This year's CSAW finals had several good kernel challenges. Today we are addressing the StringIPC from Michael Coppola. Our experimental environment is the 64-bit ubuntu 14.04.3 Virtual Machine of

NodeJs backdoor program 0x00 Preface Start with the language to write a program that does not exist in the market.0x01 why NodeJs? I personally love the JavaScript language, and what we are talking about today is NodeJS, a branch of the JavaScript

Blood cases caused by improper SVN configuration of the Global Network (unauthorized access to Redis/GETSHELL/database configuration information leakage) Blood cases caused by improper SVN configuration of the Global Network (unauthorized access to

DESTOON V6.0 () Front-end does not need to log on to SQL Injection I watched it for one night. Fortunately,It involves algorithms (non-violent) and some SQL postures.For vulnerabilities submitted overnight, it may be a bit unclear about the

SQL Injection exists in a substation of IT Time Weekly Weight 7: large manufacturersDetailed description: Http://news.ittime.com.cn/website Article comment articleid has SQL Delayed Injection1.txt content POST /usershow/sendcommunup/ HTTP/1.1Host:

Energy security: an intranet roaming caused by command execution by SINOPEC The execution of commands on a certain station of Sinopec caused Intranet roaming!Detailed description: Http: // 61.50.187.141/login! Login1.action Http: //

An unauthorized website of mavericks electric can obtain other administrator's plaintext passwords. The administrator password can be obtained from an unauthorized website of mavericks. This does not mean 20R is not enough.Detailed

The Hong Kong Airlines APP has the SQL Injection Vulnerability (which can span 32 databases) Aviation security-Hong Kong Airlines APP InjectionDetailed description: Objective: To launch the Hong Kong Airlines APPCheck that SQL Injection exists in