Cloud Security

Android Trustzone Privilege Escalation Vulnerability (CVE-2015-6639) Affected Systems:AndroidDescription:CVE (CAN) ID: CVE-2015-6639Android is a mobile phone operating system based on the Linux open kernel.In Android 5.1.1 and LMY49F versions 5.x

Belkin N600 scam Vulnerability (CVE-2015-5987)Belkin N600 scam Vulnerability (CVE-2015-5987) Release date:Updated on:Affected Systems: Belkin F9K1102 2 2.10.17 Description: CVE (CAN) ID: CVE-2015-5987Belkin N600 is a wireless dual-band

Android mediaserver Remote Code Execution Vulnerability (CVE-2015-6636)Android mediaserver Remote Code Execution Vulnerability (CVE-2015-6636) Release date:Updated on:Affected Systems: Android Android 6.0 ( Description: CVE (CAN) ID: CVE-2015-6

Malicious programs turn infected computers into Web proxies Anonymous proxy is vital to protecting users' online privacy, but it is dangerous if a person's computer becomes a proxy server without consent. Researchers from the security company Palo

Seven methods for hackers to use Wi-Fi to attack youSeven Ways for hackers to use Wi-Fi to infringe your privacy Wi-Fi-Ah, you are so convenient, but so dangerous! Here, we will introduce seven methods and countermeasures to "generously donate" your

Joomla deserialization vulnerability getshell & Command Execution Note:1. Remember to add points after the command. The command is enclosed in single quotes.2. It is only for learning php code.Usage:Php joomla. php http://xatusec.org getshellPhp

Use UFW firewall to intercept specific IP addresses UFW (Uncomplicated Firewall) is an iptables front-end application, especially suitable for being a Firewall for a single server or host. It has become the default firewall configuration tool for

Use Python Shells to bypass anti-virus software 1. bypass anti-virus software Why? 1. Bypassing anti-virus software is safer than disabling anti-virus software; 2. demonstrate how fragile and interesting anti-virus software on the client is. How? If

Analysis of the pseudo "Student transcript" Agent Trojan Review: When the graduation season is approaching, student transcript has always been the focus of parents' attention. Alibaba mobile security lab has previously discovered a malicious App

A P2P website leaks a large amount of sensitive user information, which can be used by hackers. A P2P website leaks a large amount of sensitive user information, which can be used by hackers.   A large amount of sensitive user information is leaked,

Run the Three-site deserialization command to package the ticket service. Packed up 0x01119.254.105.176: 7001 corresponds to c3.t3.com.cnWeblogic middleware, JAVA deserialization Command Execution Vulnerability  ROOT

Spring for Skype users: IP addresses can be renewed at last Skype announced in an official blog this week that they can now hide users' IP addresses and protect users from cyberattacks. In the latest version of Skype, this new security feature is

Ocai aviation design defects can cause (sensitive information leakage + unconditional 1 second admin reset) Kill admin directlyRetrieve the homepage Site:  Http://bk.travelsky.com/when the main site is open, it will jump to this station. This is how

A Xiaomi Video Phone vulnerability allows you to view background operation data The latest Xiaomi system has an additional Xiaomi video phone number, which allows you to directly view background operation data. Directly open the video phone

A SQL injection vulnerability in gionee mobile phone (affects information of 1.5 million users) The previous one was tested and repaired.But let's try again.For different injections, the same 1.5 million user information...GET/application/input?

Vulnerability of free cheetah wifi driver Liebaonat_xp.sys, a free Wi-Fi computer version of cheetah, has the arbitrary address Write vulnerability. The write address can be controlled to execute arbitrary kernel commands. When the IoControlCode

Writeup of 32C3 CTF two Web questions 0x00 Introduction As a dog for sales, I am very happy to be able to do Web problems. I have two questions: TinyHosting and Kummerkasten.0x01 TingHosting A new file hosting service for very small files. could

Blood cases caused by improper SVN configuration of the Global Network (unauthorized access to Redis/GETSHELL/database configuration information leakage) Blood cases caused by improper SVN configuration of the Global Network (unauthorized access to

Any mobile phone number registration and Password Reset No vulnerability exists in the vulnerability list. The first vulnerability is 20RANK. The phone Verification Code obtained for registration and password resetting is four digits, and there are

The Wanda hotel and resort APP has SQL injection (including more than six thousand hotel user data) SQL Injection for Wanda Group appsDetailed description: Target: Wanda Group-Wanda hotel and resort APPCheck that SQL Injection exists in the