Cloud Security

Internal email address leakage of Shenzhen Design co-channel Company (with a clear view of sensitive information) Internal email address leakage of Shenzhen Design co-channel Company (with a clear view of sensitive information)Detailed description:  

Shell can threaten the Intranet caused by improper configuration of a System in China Mobile Improper configuration causes shell to threaten the IntranetDetailed description: **. **: 8000/MMSSender What does the appearance look like?Let's go to the

P2p security-meiya futures has arbitrary files uploaded by Getshell 123Detailed description: P2p security-meiya futures Upload VulnerabilityHttp: // **. **: 81Files with vulnerabilities:/Page/maint/common/UserResourceUpload. jspYou can easily

Five input methods Win8 login interface Bypass The Win8 logon interface of the five input methods of hichina can be bypassed to execute any local program.Detailed description: 1. Download the test programThe latest version of the five input

ActiveX (II) in IE Security Series) 0x00 use Fuzz Tool ActiveX has a considerable number of Fuzzer. This time we are using an old-fashioned but weak-performing open-source Fuzzer: COMRaider. The reason for selecting it is that it is a graphical

Analysis of Internal attack detection methods based on user file objects Preface A few days ago, I saw an article on FB about the application of machine learning in the security field, "is machine learning ready for the security industry?". It seems

Baidu Mail System employee account general password involves employee and internal information It seems that this is the general mailbox password of Baidu branch in Shanghai.Detailed description: Someone cracked your email address and received an

Microsoft Edge Spoofing Vulnerability (CVE-2015-6169) (MS15-125)Microsoft Edge Spoofing Vulnerability (CVE-2015-6169) (MS15-125) Release date:Updated on:Affected Systems: Microsoft Edge Description: Bugtraq id: 78511CVE (CAN) ID:

Adobe Reader dc agm remote code execution vulnerability in CVE-2015-8458)Adobe Reader dc agm remote code execution vulnerability in CVE-2015-8458) Release date:Updated on:Affected Systems: Adobe Reader DC Description: CVE (CAN) ID: CVE-2015-845

Linux kernel Denial of Service Vulnerability (CVE-2015-6937)Linux kernel Denial of Service Vulnerability (CVE-2015-6937) Release date:Updated on:Affected Systems: Linux kernel 〈 4.2.3 Description: CVE (CAN) ID: CVE-2015-6937Linux Kernel is the

Oracle Hyperion local vulnerabilities (CVE-2015-4823)Oracle Hyperion local vulnerabilities (CVE-2015-4823) Release date:Updated on:Affected Systems: Oracle Hyperion 11.1.2.3 Description: CVE (CAN) ID: CVE-2015-4823Oracle Hyperion is a solution

ARPspoof source code can be viewed in an easy way. PrefaceIf your target is a hacker who will use the tool, ignore all of the following content. If your goal is to have your own penetration testing tool and write your own xxxtools, the source code

Tracking from helldog: in-depth analysis of Labrador Virus Recently, the security dog Hellhound analysis system obtained a very large virus sample Labrade (Hellhound-20157516 ). The virus can infect a large number of exe programs, so that the PE

Payload instance analysis: Encrypted malicious documents The malicious office document we analyzed today is a download tool: 2ELJ2E1OPJ0OT.doc The oledump result shows that the malicious document contains a VBA macro, but the plug-in cannot extract

Failed to fix SQL injection vulnerability on a platform of Xinhua life insurance, resulting in another Getshell Failed to fix SQL injection vulnerability on a platform of Xinhua life insurance, resulting in another Getshell When I read the case, I

Alexa: Top 3 SQL injection sites in China SQL Injection 1. Change X-Forwarded-For **. ** '.  GET / HTTP/1.1Host: **.**.**.**User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:42.0) Gecko/20100101 Firefox/42.0Accept:

A GitLab platform vulnerability in Hang Seng leaked a large number of sensitive engineering source code. RtDetailed description: Http: // 60.191.25.162: 5222/users/sign_inRegister an account and log on The source code of the Internally shared

The latest Discuz fix is incomplete, so you can still store XSS for the Administrator The new version fixes the insertion points provided in the http://wooyun.org/bugs/wooyun-2010-099979 However, due to the programmer's negligence, the repaired

RxJava operator (3) FilteringIn the previous article, we learned about conversion operators that can convert data into the desired format. But what if there is some data in the data set that we want to filter out? At this time, we need to use the

An enterprise-level call system has 11 SQL Injection Vulnerabilities (no DBA permission required) The same system is identified by multiple vendors. The case is evidence. This call does not require logon. Eleven files have the SQL injection