Cloud Security

Linux ASLR vulnerability: attackers can disable ASLR (CVE-2016-3672) infinitely) Recently, security personnel fixed an old vulnerability in Linux ASLR. Any user with 32-bit application permissions on x86 Devices, you can disable ASLR by setting the

Huawei P7 Privilege Escalation Vulnerability (CVE-2015-8304)Huawei P7 Privilege Escalation Vulnerability (CVE-2015-8304) Release date:Updated on:Affected Systems: Huawei P7 Description: CVE (CAN) ID: CVE-2015-8304Huawei Ascend P7 is a smart

Huawei Mate S integer overflow vulnerability in CVE-2016-1495)Huawei Mate S integer overflow vulnerability in CVE-2016-1495) Release date:Updated on:Affected Systems: Huawei Mate S Huawei Mate S Huawei Mate S Huawei Mate S Description: CVE

LibTIFF putcontig8bitCIELab Function Denial of Service Vulnerability (CVE-2015-8683)LibTIFF putcontig8bitCIELab Function Denial of Service Vulnerability (CVE-2015-8683) Release date:Updated on:Affected Systems: LibTIFF 4.0.6LibTIFF Description:

Use WinDbg to debug Windows Kernel Process Analysis If you can check the operating system's internal working process, it will be a powerful capability. Some advanced malware share the kernel as a common goal, and many of the most powerful

Centos boot Custom Script Sometimes we need to set a script on the server so that it can be started as soon as it is turned on. The method is as follows: Cd/etc/init. dviyoushell. sh # Change youshell. sh to your own script name. Write your own

SQL Injection-how do I break through an Internet company step by step Recently, I have been studying Web security-related knowledge, especially SQL injection. Some tools related to SQL injection are introduced. I am bored at home on weekends. I want

Arbitrary File Download and deletion vulnerability in tianrong top two (No Logon required) Arbitrary File Download and deletion vulnerability in tianrong top two (No Logon required) First, download and delete any file:File/task/saveTaskIpList. php $

Experience Sharing: Selection of vulnerabilities in the first quarter of the mining Alliance0 × 00 Preface On September 6, March 10-28, the competition for the "dig holes Alliance" team competition was in full swing. Here, xiaobian carefully sorted

Xiaomi App Store design defects have man-in-the-middle risks Xiaomi app store can be attacked by man-in-the-middle to leak informationTesting System miui 7 6.2.18 development Edition Xiaomi app store does not verify whether the SSL certificate is

About Web security, 99% of websites ignore these   Web security is a problem that cannot be emphasized. We find that many websites in China do not implement full-site https, and there are few practices for other security policies, the purpose of

About Web security, 99% of websites care about this. Web security is a problem that cannot be emphasized. We find that many websites in China do not implement full-site https, and there are few practices for other security policies, the purpose of

P2P Financial Security Sum credit, resetting login/transaction password, and other defects In the dark of the night, I dug a wave of data, only to find the big factory ~~~~~~~~~~~~ The final launch before January 1, April successfully completed the

Metaphor-A real life Stagefright exploit analysis0x00 Summary This article describes how to use Stagefright, one of the most notorious vulnerabilities in Android. Before that, we thought this vulnerability was very difficult to exploit. In this

Application Truecaller remote exploitation vulnerability involving Android 0.1 billion Security researchers at the cheetah mobile security research lab found a serious vulnerability in the call management application Truecaller. FreeBuf encyclopedia

Password Reset for any user due to design logic Defects RT Https://www.pzb.com/view/html/user/forgetPassword.shtml13333333333 Test  Enter any verification code and capture packets  Change to successGo to the password setting page  Set a new

Any password of 51CTO may be reset (comprehensive use of various combinations) Email 1 -- get three Password Reset links: URL 1Http://ucenter.51cto.com/setemailpass.php? Id = 7804861 & unid = 7747d234f4b2b8cab3e55485f2884abcUnid MD5 decryption:145860

Analysis on the advantages and disadvantages of Uber's three vulnerabilities Through careful design, the author turns a self-XSS chicken ribs and two csrf chicken ribs into a high quality vulnerability.Original article:

UFIDA TruboCRM management system SQL Injection Vulnerability Yonyou TruboCRM management system SQL Injection Yonyou CRM Customer Relationship Management system Google Keyword: intitle: yonyou TurboCRM intext: LoginInjection

Domain penetration-Analysis of Hook passwordchangenoworkflow 0x00 Preface In the previous article, we introduced two methods for maintaining domain control permissions-SSP and Skeleton Key. Both methods need to be implemented by Mimikatz, and there