Cloud Security

Apple iOS Profiles Spoofing Vulnerability (CVE-2016-1766)Apple iOS Profiles Spoofing Vulnerability (CVE-2016-1766) Release date:Updated on:Affected Systems: Apple iOS Description: CVE (CAN) ID: CVE-2016-1766IOS is an operating system

Use WinDbg to debug Windows Kernel Process Analysis If you can check the operating system's internal working process, it will be a powerful capability. Some advanced malware share the kernel as a common goal, and many of the most powerful

Android Application Security Development to prevent unintentional data leakage 4th of the Top 10 OWASP mobile security vulnerabilities are unintentional data leaks. When an application stores data in a vulnerable location, it may cause unintentional

OpenSSL DROWN death Vulnerability Detection and repair methods I. Vulnerability Description: popular servers and clients use TLS encryption. SSL and TLS protocols ensure that users surf the Internet, shop, and instant messaging without being read by

Introduction to forcible use of more complex passwords I recently read a blog post (bole online Note: Please refer to the end of this article) about forcible use of more complex passwords. The original author said this is for safety, but I don't

The password setting method is useless... First of all: I believe many people like to use their birthdays as their passwords, such as 19900523. There is only one reason for this. After all, there are too many websites today, and you do not know how

S2-029 Struts2 label library Remote Code Execution analysis (including POC) The Struts2 tag Library provides topic and template support, which greatly simplifies the compilation of view pages. In addition, the topics and templates of struts2 provide

Vulnerabilities in Git versions earlier than v2.7.1 allow attackers to execute code remotely. It is understood that security researchers found a security vulnerability in all versions of Git before version 2.7.1, which exists on both the server side

Improper configuration of a certain area of huiping network leads to leakage of all hotel account and password (involving nearly hotels in China) This directly results in the disclosure of all the hotel account and password, involving the disclosure

Improper command execution vulnerability repair and bypass on a Baidu website A command execution vulnerability on a Baidu site, which can be used to fix improper Bypass #1 vulnerability referenceWooYun: Execute the st2 command on a Baidu site

In those years, we will explore the global protection of SQL injection. Bypass Base64Decode0x01 background Currently, WEB programs basically have global filtering for SQL injection, such as enabling GPC in PHP or common in global files. use the

If the sandbox of a query service terminal in Tangshan North Railway Station is bypassed, the CMD command can be called up and executed. Rt... What can be bypassed is the "passengers self-service Inquiry System" service terminal of Tangshan North

Common security problems in verification code design CAPTCHA is short for verification code: Completely Automated Public Turing test to tell Computers and Humans Apart A completely automated human-machine-differentiated Turing test ". The time

The Bank of China paid for a small hole in a website involving a large number of personal information and multiple database information. Attachment: shell writing skillsI don't know where the actual location of the bank's payment is in Shandong? Is

Ruff. io is not properly configured. (Nan Chao: Li Ge's embedded smart hardware development company) NanchaoCompany ProfileWe are an Internet company dedicated to simplifying smart hardware development. We welcome people who are willing to learn and

Package vulnerabilities on a giant's website (weak passwords \ SQL Injection \ PMA access \ SVN leakage) Conscience vendors are rare (* accounts ^ Accounts *) Http: // 222.73.243.217/weak password: xubin 123456This background seems to be obsolete,

Immediately protect two SQL vulnerabilities on the master site (hundreds of thousands of insurance order information leaks) Immediately protect two SQL vulnerabilities on the master site (hundreds of thousands of insurance order information

Tickets passed Multiple Vulnerabilities (SQL injection, command execution, and deserialization) Multiple Vulnerabilities (SQL injection, command execution, and deserialization) 1> InjectionURL: http: // 119.254.105.143/ticket/web. go? Method =

Popularization and Application of Zoomeye penetration Network Camera Network CAMERAS (ip cameras) are becoming more and more popular in daily life. License plate numbers are captured at intersections, and kindergartens are used to monitor children

How to handle ntp server exceptions Preface: First, what is a reflection amplification attack? NTP is transmitted over UDP, so the source address can be forged.There is a type of query command in the NTP protocol. A short command can be used to send