Cloud Security

Explanation of the Linux kernel drop position (1) Return-oriented programming is a new type of attacks based on code reuse technology. Attackers can extract command fragments from existing libraries or executable files and construct malicious code.  

Oracle MySQL Server DoS Vulnerability (CVE-2016-0616)Oracle MySQL Server DoS Vulnerability (CVE-2016-0616) Release date:Updated on:Affected Systems: Oracle MySQL Server Description: CVE (CAN) ID: CVE-2016-0616Oracle MySQL Server is a

Huawei S5300 Campus Series Switch Information Leakage Vulnerability (CVE-2015-8675)Huawei S5300 Campus Series Switch Information Leakage Vulnerability (CVE-2015-8675) Release date:Updated on:Affected Systems: Huawei S5300 Campus Description:

Apple MAC/IOS Webview DoS Vulnerability (affects safari, chrome for IOS, QQ, etc) Apple webview does not correctly handle the replace in the loop. You can use the webview application crash.Mac/IOS Webview DOS test by data streamFunction x (str,

Deep Analysis of JavaScript Backdoors 0x00 background Previously, the article JavaScript backdoorof @ san mentioned how to use rundll32.exe to execute a JavaScript code to bounce an Http Shell. Here, I will share with you the article on the

Remote Control Trojan analysis report of "shadow stealing" I. Overview After feedback from multiple users, a scammers lied about trading game equipment and sent the compressed package to induce them to click "Images ". In the actual transaction

How to Use Metabrik to automate malware Analysis In this article, we will show you how to use Metabrik to automate malware analysis, so that you can run malicious programs on virtual machines after creating a snapshot of the Windows system. In this

An SSRF vulnerability in zhihu main site can detect the Intranet The https://www.zhihu.com/question/38548957/answer/77482000 was found to answer this question.It is really a bit interesting. I answered the question of the subject using actual

A third-party website causes cookie leakage of an Official Administrator of wooyun Strange posture, Please Ray. Today, I finally configured Daniel @ Matt's GourdScan.So I came up with a question:Http://www.gufensoso.com/search? Q = intitle % 3A % 22

A Baidu business can remotely read arbitrary system files. A Baidu business can remotely read sensitive files Http: // 111.13.100.253/pcheck/index. php? Action = showPcheck & report =.../etc/passwdRoot: x: 0: 0: root:/bin/bash bin: x: 1: 1:

An SQL injection vulnerability exists in a site of xiaguo Network (involving 32 databases) An SQL injection vulnerability exists in a site of xiaguo network. Http://m2.xianguo.com/homeindex/list? Cid = 1 & tagid = 100_33 injection point: cidsqlmap

Wukong CRM system backdoor causes unauthorized access to company files This may be the debugging interface used for testing. As a result, you can view the internal files uploaded by the company's CRM without having to log on. The installation

From redis weak password to mavericks core database The calf is good and can run after charging.Unfortunately, I did not have such a good car. I had to look at the official website of the Mavericks to stop my thirst. In this process, I found some

New Injection of the most vulnerable user information for a general system is leaked (no login required) New Injection of the most vulnerable user information for a general system is leaked (no login required) This system is a new smartbos

Arbitrary File Download from a collaborative Portal System of China Mobile Anhui mobile Some information about the Intranet system is leaked. Address: http: // **. **/Page/Login/UserLogin. aspx  There is a notice for the user who needs to know

A provincial website of China Mobile 10086.cn SQL injection involves a large amount of data. A provincial website of China Mobile 10086.cn SQL injection involves a large amount of data. Injection of Jiangsu mobile B2B Mall, oracle database, can be

The official APP of xiaguo network has SQL injection (Cross 32 databases/including a large number of user libraries) SQL Injection for APP security Objective: To view the official APP of xiaguo NetworkSQL Injection exists in the following areas:

Cisco Jabbar chat client vulnerable to man-in-the-middle attacks Cisco announced that its chat client Jabbar has a security vulnerability and is vulnerable to man-in-the-middle attacks. This vulnerability exists in the Jabbar on the Windows platform.

Further use of the Apsara stack SSH Backdoor How can I use this SSH backdoor to access the Intranet? Well, this is what this article will talk about. The backdoor obtains the root permission of the firewall, that is, all firewall operations can be

602 Gbps: attacks against the BBC have become the strongest DDoS attacks in history New World Hacking, the hacker organization responsible for the BBC attack, said that the intensity of DDoS attacks against the BBC has reached 602 GBps, which will