Cloud Security

Security researchers found new Mac malware on HackingTeam Researchers found a newly developed Mac malware on HackingTeam, a result of speculation. Since last July, this notorious malware has caused the outflow of private emails and source code from

Principle of HTTP escape: using HTTP 0.9 for bypass   This is the first article in the HTTP escape series. Most firewalls only block packets that are incorrectly identified by rules. Therefore, data packets that cannot be understood by the firewall

WordPress and Joomla websites: Analysis of jQuery attacks under deception     JQuery is a very mainstream JS code library, which is mainly used to eliminate JS implementation differences before different browsers. If you have tried WEB programming,

Jboss Command Execution exists on a Vehicle Dynamic Intelligent Monitoring Platform in Shanghai (involving a large amount of hazardous Vehicle Information/implementing monitoring and dispatching/involving a large amount of vehicle hazardous

A document is leaked, resulting in 12306 direct access to the background of a system Some documents should not be leaked.   http://www.sheny.12306.cn/Dzsw/downLoad/Dzsw201311doc.doc     The Manual of the Railway Freight electronic commerce system

P2p financial security: xinhehui has an influence on java Reverse Sequence command execution on the Intranet. RT Java anti-sequential vulnerability boom is still not over. In bi.xinhehui.com: 9704/115. 231.105.61: 9704, we found that weblogic has

Renren website has SQL injection vulnerability with verification script Renren website SQL Injection Vulnerability Recently live800 seems very fire on the dark clouds search... http://live800.wan.renren.com/live800/loginAction.jsp? CompanyLoginName =

3 SQL vulnerability packages in a substation of letao Network (11 databases/may affect more than 800 million users) RT Sites: http://guanli.letao.com/   Injection 1,  Http://guanli.letao.com/wap/shoe.aspx? Add = & iid = 123 & pid = 967243173

There are two injection vulnerabilities in the main site of retao, involving million user information. 233 when someone else's homepage is displayed, he will definitely search for the homepage. 1. root @ Hacker ~] # Sqlmap. py-u" Mask Region

Magento The magento XSS vulnerability is not introduced. Baidu is everywhere. Here, we will simply record the processing process (relatively crude, whether it is valid or not, not verified) Edit App/design/adminhtml/default/template/sales/order/

Taohuawu Adult Products mall vulnerability allows you to view any user order Mainly concentrated on the client Vulnerabilities discovered by others still exist.WooYun: Packaging and distributing multiple vulnerabilities of Adult Products in

Jiuyou pseudo-static SQL injection involves 6.43 million user account and password information As soon as nine games are mentioned, my heart will hum: the vast world is my love ......    Proof of vulnerability: Web application technology: NginxBack-

Arbitrary Password Reset caused by design defects of a substation in sogou Non-violent, second reset. The problem is that sogou cloud testing launched a business a few months ago.Mt.sogou.com  Session coverageUse your mobile phone number to

Getshell caused by unauthorized access to redis on a website of Phoenix Learn from Pig Http: // 61.155.16 7.220: 843/  61.155.167.220 although redis port 221 is changed, it is still not authorized to access  Http: // 61.155.167.220/test. php

Cool music command execution on a site Cool-me command execution on a site Managetest.kuwo.cn bash Command Execution VulnerabilityCurl-A "() {foo;}; echo;/sbin/ifconfig" http://managetest.kuwo.cn/cgi-bin/test-cgiEth0 Link encap: Ethernet HWaddr 00: 1

Master site SQL injection of the red/Black alliance and bypassing Baidu cloud Acceleration Master site SQL injection of the red/Black alliance and bypassing Baidu cloud Acceleration When I went to the Consortium for study, I started to search for 1

Tencent Excel has the SQL injection vulnerability on a website Tencent Excel has the SQL injection vulnerability on a website POST/index. php/Home/Index/HTTP/1.1Content-Length: 179Content-Type: application/x-www-form-urlencodedX-Requested-With:

From redis weak password to mavericks core database The calf is good and can run after charging.Unfortunately, I did not have such a good car. I had to look at the official website of the Mavericks to stop my thirst. In this process, I found some

Adobe Flash Player has entered the stage  Adobe Flash Player can be smoothly applied to various platforms, but it is because of its extensive application and its own vulnerabilities that it is always favored by hackers. This time is no exception.For

Technical Secrets: How do I analyze whether a Chinese kitchen knife contains a backdoor? 0 × 00 Preface There is an old saying in our country that "We often walk by the river and there are no wet shoes". Many tools circulating on the Internet