Cloud Security

GnuTLS certificate verification Security Restriction Bypass Vulnerability (CVE-2015-0282) Release date:Updated on: Affected Systems:GNU GnuTLS Description:Bugtraq id: 73119CVE (CAN) ID: CVE-2015-0282 GnuTLS is a function library used to implement

How to bypass the remote lock function of IOS8 The remote lock function of IOS helps users remotely lock their lost Apple devices, so that thieves or the person who finds the device cannot access the content of the device. However, a security

IIS short File Vulnerability repair Recently, the website system has been scanned for a vulnerability: IIS short files/folders.Vulnerability level: medium-risk vulnerability address: All websites Vulnerability Description: IIS short file name

FreeType tt_cmap4_validate DoS Vulnerability Release date:Updated on: Affected Systems:FreeType Description:CVE (CAN) ID: CVE-2014-9663 FreeType is a popular font function library. FreeType 2.5.4 or earlier, sfnt/ttcmap. c's tt_cmap4_validate

Apache Qpid Multiple Denial of Service Vulnerabilities (CVE-2015-0203) Release date:Updated on: Affected Systems:Apache Group Qpid Description:Bugtraq id: 72030CVE (CAN) ID: CVE-2015-0203 Apache Qpid (Open Source AMQP Messaging) is a

Mobile phone Control for Intranet penetration I have been studying the methods from wifi cracking to pc and mobile phone Control recently. I want to share with you how to download and replace apk on a mobile phone! (1) Environment:Target machine: 192

Read the world's strongest soft engine QVM in one minute Recently, the domestic security circle again came a good news: international authoritative evaluation agency AV-TEST published the latest anti-virus software rankings show, the qvm ai

Decrypts the WebLogic PasswordRecently I met several Linux servers during penetration testing, with Samba sharing that is publicly accessible. In many cases, shared files have some interesting things. Whether it is user authentication information or

Invalid credential stuffing Protection Policy cookie The library hit AttacK Defense solution here mentions some unreliable solutions. This time, we will share an unreliable solution that uses cookies to identify users. The test object is a

The latest XSS vulnerability affects multiple WordPress plug-insDue to misuse of the add_query_arg () and remove_query_arg () functions, multiple WordPress plug-ins are vulnerable to cross-site scripting (XSS) intrusion. In WordPress, developers

A parallel permission vulnerability in street network can traverse user details Information includes: name, gender, mobile phone (if the user has entered), location, school, Major, admission time, and other mobile phones connected to the computer

Read any file of the latest MetInfo version Attackers can obtain Arbitrary File Content on the server by submitting specially crafted parameters! The include/thumb. php file of MetInfo 5.2 (the latest version) is used to obtain thumbnails. However,

Multiple cms backgrounds can be cracked and bypassed for protection 1. Phpcms Phpsso_server in PhpcmsAfter the cracking, the code value in the Session will not be refreshed no matter whether the account password is correct or not.The login page

Loose loose Password Reset Vulnerability As a financial website, hailun.com is China's largest loan search and service platform. The password reset vulnerability affects the security of funds in all user accounts of the entire system. Please pay

CSRF uses tricks to forge a rollback Let's talk about Csrf first. CSRF (Cross-site request forgery, also known as "one click attack" or session riding, usually abbreviated as CSRF or XSRF, is a type of malicious use of websites. Although it sounds

Expose how hackers control and attack your website by uploading a jsp page Some time ago, the company asked a security company in the industry to perform a security scan on the enterprise's information system and found many security risks and system

Cmseasy fix improper foreground unrestricted select union injection (bypassing webscan) Cmseasy repair improper foreground unrestricted select union InjectionDownload the latest version: Ballot_act.php: Function index_action () {if (front: post

Character Security filtering functions in PHPIn the WEB development process, we often need to obtain user input data from all over the world. However, we "Never trust the data input by those users ". Therefore, various Web development languages

The partner management system getshell (roaming intranet) is caused by leakage of ZTE's external accounts) Log on to the management system using the leaked account, and then upload the webshell directly at the upload location.Enter the keyword

There is a weak password in a certain Suning border network device (which can overwrite the configuration file with the SSLVPN function) A vbr in Suning has a weak password (with SSLVPN configuration file), which may bypass the border firewall. Weak