Cloud Security

Simtrace: exploring the world of SIM cards 0 × 00 about SIM card As we all know, SIM card is a small card inserted on a mobile phone. It is called the Subscriber Identity Module customer recognition Module. However, not many people in the world know

Uses Linux kernel information leakage to bypass the kALSR Protection Mechanism I. Preliminary description Because it has been fixed in the Linux kernel, there is no concern about this

Isc bind buffer. c DoS Vulnerability (CVE-2015-8705)Isc bind buffer. c DoS Vulnerability (CVE-2015-8705) Release date:Updated on:Affected Systems: Isc bind 9.10.x Description: CVE (CAN) ID: CVE-2015-8705BIND is a widely used DNS protocol.Isc

Google fixed the zero-day Kernel Vulnerability, indicating the problem was not that serious. A privilege escalation vulnerability was detected in the Linux Kernel a few days ago, affecting a large number of Android devices. Due to the

Cisco Adaptive Security Appliance information leakage (CVE-2016-1295)Cisco Adaptive Security Appliance information leakage (CVE-2016-1295) Release date:Updated on:Affected Systems: Cisco Adaptive Security Appliance 8.4 Description: CVE (CAN)

How to save your password in the correct postureSummary In the past few years, many websites have been deprecated, leading to the leakage of plain text passwords of many users. This article does not discuss the pants removal technology, but focuses

9 Yang Intranet roaming caused by a Vulnerability (password needs to be filtered) Fix Reference:Http://wooyun.org/bugs/wooyun-2010-0141195 based on previous VulnerabilitiesThe account has been filtered out. The password is still not filtered

Technical explanation of ransomware PadCrypty domain name Generation Algorithm PadCrypt is the name of a ransomware, which was first mentioned on Twitter @ abuse_ch. BleepinComputer.com wrote two articles about PadCrypt. MalwareHunterTeam also

Analysis of the Python interface of the Deepviz SDK Linked Library Today is the last time we released our Python SDK Linked Library to support users to quickly use our Deepviz technology in their existing projects and platforms. Since our Deepviz

A business spree in Phoenix has multiple vulnerabilities (SQL, stored XSS, and sensitive information) RTRT Http: // ***** response? Keyword = _**Parameter keyword _0, 1), floor (rand (0) * 2) x from information_schema.tables group by x))      'And

A vulnerability in shundian online store may leak a large number of member and order information (various payment keys) In November 12, 2014, Shenzhen shundian Chain Co., Ltd. was successfully listed on the New Three board, known as "Chinese Nasdaq.

The weak password Getshell exists in multiple core systems of Min 'an Property Insurance Co., Ltd. 1. Core Business System of Min 'an Property Insurance Co., Ltd.Http: // 218.17.200.230: 9004/casserver/login? Service = http % 3A % 2F % 2F218. 17.200

Ping An Da tengfei express found that Shell involves a large number of parcel information including the main site data. Information Leakage of tens of millions of parcels and many Database backups **. **: 8080/oa/login. jsp  The shell address is:**.

Alimama travel network merchant system has multiple design defects to be fixed White hats should describe and analyze problems in detail and provide reliable repair measures as much as possible. In this way, the vendor can better fix the

Latency injection exists on important sites of the pull Network Punch card GET /wangpiao/checkCinema.php?robId=46&filmid=59674 HTTP/1.1Host: m.lashou.comUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:42.0) Gecko/20100101 Firefox/42.0Accept: text/

Arbitrary SQL Execution Vulnerability (getshell) in the imo cloud Office System) Rt This vulnerability is an SQL injection vulnerability. However, the mysql PDO query system can execute multiple statements, which is equivalent to arbitrary SQL

SQL injection 2 exists somewhere in Sina financial Involving 52 databases that affect a large amount of user data Injection point: http://vip.stock.finance.sina.com.cn/fund_center/data/jsonp.php/funds_jjpj/FundRank_Service.getHTSMFundManagerInfo?

Sunshine insurance group's java deserialization command executes two packages (write shell tutorial Linux) Celebrate the achievement of 1000rank and share some experience in shell writing.This is a Linux server and has the default jboss

An incorrect location in laiyi (involving 561858 orders containing detailed user information) On such a cold day, there are still mosquitoes. In the morning, my brother got up and squatted, and mosquitoes were biting Chrysanthemums! It's so cool to

Identifies and attacks meterpreter's http or https handler This article will show how to identify the https or http handler of meterpreter, and how to launch DoS attacks (by setting fake sessions between attackers and listeners ).Summary: 1. Request