Cloud Security

How to disable USB storage devices and block USB flash drives using Win7 group policiesIn the company's Lan, we often need to disable USB flash drives and shield the use of USB storage devices. How can we achieve this?Method 1: Disable USB flash

Privilege Escalation using the Use-After-Free (UAF) vulnerability in the Linux Kernel Last month, the CVE-2016-0728 Local Elevation of Privilege Vulnerability let everyone's eyes again focused on Linux kernel security. Like CVE-2015-3636, CVE-2015-73

Explanation of the Linux kernel drop position (1) Return-oriented programming is a new type of attacks based on code reuse technology. Attackers can extract command fragments from existing libraries or executable files and construct malicious code.  

Oracle MySQL Server DoS Vulnerability (CVE-2016-0616)Oracle MySQL Server DoS Vulnerability (CVE-2016-0616) Release date:Updated on:Affected Systems: Oracle MySQL Server Description: CVE (CAN) ID: CVE-2016-0616Oracle MySQL Server is a

Huawei S5300 Campus Series Switch Information Leakage Vulnerability (CVE-2015-8675)Huawei S5300 Campus Series Switch Information Leakage Vulnerability (CVE-2015-8675) Release date:Updated on:Affected Systems: Huawei S5300 Campus Description:

How to retrieve the encryption program password Recently, a friend told me that he forgot the password of the encryption program. There is a lot of important information in it. I hope I can help him retrieve the password. I thought I just clicked

Good Loan network many sub-stations SQL injection (bypass filtering) SQL Injection Many substations share the same injection pointInject data packets:  GET /s4-10x12-0x0x9999/?cpid=968*&p=5 HTTP/1.1Host: wenzhou.haodai.comProxy-Connection:

XSS Rootkit [complete revision] 0 × 00 Preface As we all know, the risk definitions of XSS vulnerabilities have been vague, and cross-site scripting (XSS) vulnerabilities are both high-risk and low-risk vulnerabilities that have been controversial

Unauthorized access to a zookeeper in Baidu games Demonstrate how to use the tangscan plug-in to find unauthorized access to zookeeper. This plug-in has been added to the tangscan luxury package. welcome to use it! A zookeeper of Baidu game has

Disable descriptions of some php dangerous functions Phpinfo ()Function Description: outputs information about the PHP environment, related modules, and WEB environment.Hazard level: MediumPassthru ()Function Description: allows execution of an

Go to ele. Me Intranet again To punch a card //It means that my red packet has expired even if it is useless // Through information collection, we found that the vendor re-opened a mail  Do not disclose password rules (to avoid successful

A system vulnerability of Air China causes Getshell to affect host security. Getshell caused by a system vulnerability of Air China in aviation security (Nmap can detect Intranet impacts on a large number of hosts)A small vulnerability that causes a

Multiple SQL injection vulnerabilities in a website of Jinjiang Inn Example 1./web/broswer/CustomerTypeBrowser. jsp file injection  http://www.jjhotels.cn/web/broswer/CustomerTypeBrowser.jsp?sqlwhere=where 1=2 union all select 1,user,@@version,4,5,6

The VPN link is not strictly controlled by Sohu Changyou account system. RT 01 # weak Email PasswordHttps://webmail.cyou-inc.com/owaWangjian 1qaz @ WSXThe VPN link is displayed.  The Wi-Fi password is displayed.  You can view the latest games with

The Tang Dynasty scanner is unauthorized to View Details of user Vulnerabilities Wang I have a link in my hand.  http://www.tangscan.com/corp.php?action=detail&id=******&auth=a17a2************bb70e&uid=***&taskid=****&page= You can access  OK. How

Getshell: Go to the Haier main site and all its second-level domain names and databases (getshell for application vulnerabilities) No description! WooYun: TRSWCM full-version GETSHELL VulnerabilityHttp://enwcm.haier.com/first, the background is open

An SQL injection vulnerability exists in a sub-station of fangxun. An injection of the room Information Network The problem lies in the sales parameter.GET/esf_personalSellin.do? Index = 4 & sales = 3.0 * HTTP/1.1Host: 0757.home77.comUser-Agent:

An SSRF vulnerability in zhihu main site can detect the Intranet The https://www.zhihu.com/question/38548957/answer/77482000 was found to answer this question.It is really a bit interesting. I answered the question of the subject using actual

Unauthorized access to a Huawei system may cause information leakage. Getshell/root permission may affect Intranet security. Rt Http: // MAID: 8080/imeeting_webinar_web/  Http: // MAID: 8080/dmp_sys_web/  Http: // 183.131.151.13: Port 8088/8088

A third-party website causes cookie leakage of an Official Administrator of wooyun Strange posture, Please Ray. Today, I finally configured Daniel @ Matt's GourdScan.So I came up with a question:Http://www.gufensoso.com/search? Q = intitle % 3A % 22