Cloud Security

Apple MAC/IOS Webview DoS Vulnerability (affects safari, chrome for IOS, QQ, etc) Apple webview does not correctly handle the replace in the loop. You can use the webview application crash.Mac/IOS Webview DOS test by data streamFunction x (str,

Deep Analysis of JavaScript Backdoors 0x00 background Previously, the article JavaScript backdoorof @ san mentioned how to use rundll32.exe to execute a JavaScript code to bounce an Http Shell. Here, I will share with you the article on the

Remote Control Trojan analysis report of "shadow stealing" I. Overview After feedback from multiple users, a scammers lied about trading game equipment and sent the compressed package to induce them to click "Images ". In the actual transaction

How to Use Metabrik to automate malware Analysis In this article, we will show you how to use Metabrik to automate malware analysis, so that you can run malicious programs on virtual machines after creating a snapshot of the Windows system. In this

A Baidu business can remotely read arbitrary system files. A Baidu business can remotely read sensitive files Http: // 111.13.100.253/pcheck/index. php? Action = showPcheck & report =.../etc/passwdRoot: x: 0: 0: root:/bin/bash bin: x: 1: 1:

Thumb play master station SQL Injection somewhere # The first time in the Tang Dynasty # the launch of the security cruise Conference of the Tang Dynasty !!!On September 16, December 16, the 798 Show theater went viral!Event registration page: http:

An SQL injection vulnerability exists in a site of xiaguo Network (involving 32 databases) An SQL injection vulnerability exists in a site of xiaguo network. Http://m2.xianguo.com/homeindex/list? Cid = 1 & tagid = 100_33 injection point: cidsqlmap

Wukong CRM system backdoor causes unauthorized access to company files This may be the debugging interface used for testing. As a result, you can view the internal files uploaded by the company's CRM without having to log on. The installation

From redis weak password to mavericks core database The calf is good and can run after charging.Unfortunately, I did not have such a good car. I had to look at the official website of the Mavericks to stop my thirst. In this process, I found some

New Injection of the most vulnerable user information for a general system is leaked (no login required) New Injection of the most vulnerable user information for a general system is leaked (no login required) This system is a new smartbos

Arbitrary File Download from a collaborative Portal System of China Mobile Anhui mobile Some information about the Intranet system is leaked. Address: http: // **. **/Page/Login/UserLogin. aspx  There is a notice for the user who needs to know

A provincial website of China Mobile 10086.cn SQL injection involves a large amount of data. A provincial website of China Mobile 10086.cn SQL injection involves a large amount of data. Injection of Jiangsu mobile B2B Mall, oracle database, can be

The official APP of xiaguo network has SQL injection (Cross 32 databases/including a large number of user libraries) SQL Injection for APP security Objective: To view the official APP of xiaguo NetworkSQL Injection exists in the following areas:

Cisco Jabbar chat client vulnerable to man-in-the-middle attacks Cisco announced that its chat client Jabbar has a security vulnerability and is vulnerable to man-in-the-middle attacks. This vulnerability exists in the Jabbar on the Windows platform.

Further use of the Apsara stack SSH Backdoor How can I use this SSH backdoor to access the Intranet? Well, this is what this article will talk about. The backdoor obtains the root permission of the firewall, that is, all firewall operations can be

Alimama travel website has SQL Injection (⊙ O ⊙ )... If a problem occurs at a point, check whether there are any problems with all similar points .... POST/lvyou/dest_index/AjaxGetTripList HTTP/1.1Content-Length: 66Content-Type:

Yisearch technology has a large number of webshells on a website that involve a large amount of user data. I only came here when I saw a vendor activity ~~~~ PS: a gift is good, and 20 RANK is good.Yisearch technology found a large number of

Arbitrary File Upload Vulnerability in a Haier System Arbitrary FCKeditor file upload in a Haier System File Upload address: http://home.ithaier.com/FCKeditor/editor/filemanager/browser/default/browser.html? Type = all & Connector =

Another stored xss vulnerability in xueqiu.com You have compared the previous vulnerabilities and confirmed they are not repeated. This problem occurs when you upload a PDF file and describe it.The problem is a bit strange, but it is indeed a

602 Gbps: attacks against the BBC have become the strongest DDoS attacks in history New World Hacking, the hacker organization responsible for the BBC attack, said that the intensity of DDoS attacks against the BBC has reached 602 GBps, which will