Cloud Security

Baidu Browser Remote Command Execution 2-bypassing privileged domain restrictions and Solutions Three vulnerabilities are used in total: 1. Bypass privileged domain judgment2. Use the defect API to download any program to a specified directory3.

Linux security and Optimization Introduction: We must understand: Minimum permissions + minimum services = maximum security Therefore, whether it is to configure any server, we must disable unused services and set system permissions to the minimum

WebKit Memory Corruption Vulnerability (CVE-2014-4473) Release date: 2014-3 3Updated on: 2014-6 6 Affected Systems:WebKit Open Source Project WebKit 1.2.XDescription:Bugtraq id: 71444CVE (CAN) ID: CVE-2014-4473 WebKit is an open-source browser

Safari/Android browser full-version URL Spoofing Vulnerability   The problem exists in the full version of the android standard browser and the full version of the safari (desktop/mobile) browser.POC: http://kcal.pw/t5.htm https://baidu.com In terms

Baidu guard defends against all invalid Vulnerabilities In the full defense environment of Baidu guard, common user-state programs can kill all the daemon processes of Baidu guard. 1. Trigger exp:  2. After exp is run:  3. malicious programs

Detailed analysis of Windows vulnerability in MS14-066/CVE-2014-6321 Winshock About MS14-066/CVE-2014-6321, that is, winshock vulnerability has been popular for a long time. Due to its wide impact, no poc announcement has been made so far.

SAP NetWeaver Denial of Service Vulnerability (CVE-2014-8591) Release date:Updated on: Affected Systems:Sap net Weaver 7.3Sap net Weaver 7.02Description:Bugtraq id: 71030CVE (CAN) ID: CVE-2014-8591 SAP NetWeaver is the integrated technology

Multiple Linux Kernel Security Vulnerabilities Release date:Updated on: Affected Systems:Linux kernelDescription:Bugtraq id: 71253 Linux Kernel is the Kernel of the Linux operating system. Linux Kernel has multiple security vulnerabilities.

GNU glibc Arbitrary Command Execution Vulnerability (CVE-2014-7817) Release date:Updated on: Affected Systems:GNU glibcDescription:Bugtraq id: 71216CVE (CAN) ID: CVE-2014-7817 Glibc is the implementation of C libraries in most Linux operating

Dve data virtual execution technology vs dep + aslr + emet + cfi The idea of articles about 97 years ago should be somewhat early. When the macro virus broke out, Kingsoft and Jiangmin company thought about it. In fact, the previous article refuted

Huawei security: dancing internationally As "a place to talk about security", the annual RSA conference will become a benchmark for the development of the security industry. This year is no exception. As a representative of the Chinese RSA 2014

Using GRC for security research and auditing-converting radio signals into packets0x00 Introduction As a company engaged in information security research and consulting, InGuardians has not only focused on penetration testing and network forensics

CentOS server command for simple judgment of CC attacksCC attacks are easy to launch and have almost no cost. As a result, there are more and more CC attacks.Most CC attacks are used for online download. These tools seldom forge features, leaving

Phpwind background account password can be cracked and verification code can be ignored   Let's take a look at the official website.Http://www.phpwind.net/admin.php  Verification code availableThen let's take a

Discuz! Any file contained in the front-end of the Public Platform Plug-in can be directly shell Discuz! The front-end file of the plug-in can be directly included in the shell. The result of the dz plug-in center's main site was intercepted by the

Any password reset for the general security business of a system integration service provider of China Telecom ?) Believe it or not?  Http://www.jsict.com/Jiangsu hongxin System Integration Co., Ltd. Product: Tianyi Shopping MallTianyi taobaodian

HCTF writeup (web) Qupiron's favorite 10pt Legend has it that Qiu bilong is the younger brother of Cupid and Qiu bilong is a little god of love. Although he has two wings, he is too fat to fly because he eats too much ~ So what's the problem ?! Qiu

WordPress 3.0-3.92 stored XSS Vulnerability Analysis & POC   Overview: WordPress is a blog platform developed in PHP. you can build your own website on servers that support PHP and MySQL databases. WordPress can also be used as a Content Management

Gionee mobile phone remote command execution in a system (Getshell) Control all company information Command invocation address: http://mail.gionee.com/m/index.actionEmail system. There should be more than 200 users.SPAM login address

Exploitation of NTFS data streams under WIN in webshell hidingThis exploitation method. As early as a few years ago, it was nothing new.I have never paid special attention to it before. I made a mistake today, so I recorded it.First, write the