Cloud Security

Zabbix complete Email Alert Summary The configuration order on the web side is as follows:Create user media --> create user groups and users --> Add alarm actions for trigger and set email sending users and media1. Create a user MediaCreate user

OLEOutlook exploitation: one email bypasses all Enterprise Security Prevention and Control In this article, I will show you how to embed an executable file into the company network by Email. Disguised as a Word document that bypasses the firewall.

Security personnel discovered the VMware storage permission expansion Vulnerability Recently, information security researchers found that VMware applications have the Privilege Escalation vulnerability. The affected products include ESXi, Fusion,

Advantech EKI-132x Authentication Bypass Vulnerability (CVE-2015-7938)Advantech EKI-132x Authentication Bypass Vulnerability (CVE-2015-7938) Release date:Updated on:Affected Systems: Advantech EKI-132x Description: CVE (CAN) ID:

Following the "disconnection" of the BBC, WhatsApp is also interrupted in many regions around the world.The famous instant messaging software WhatsApp was interrupted on the eve of the New Year. Many people wanted to use WhatsApp to contact their

P2p security-meiya futures has arbitrary files uploaded by Getshell 123Detailed description: P2p security-meiya futures Upload VulnerabilityHttp: // **. **: 81Files with vulnerabilities:/Page/maint/common/UserResourceUpload. jspYou can easily

OWASP Mobile Security Test guide: Certificate lock bypass Certificate Pinning is an additional security layer that ensures the uniqueness of certificates provided by remote servers for applications.The remote server x509 Certificate or public key

Android display driver Memory Corruption Vulnerability (CVE-2015-6634)Android display driver Memory Corruption Vulnerability (CVE-2015-6634) Release date:Updated on:Affected Systems: Android Description: CVE (CAN) ID: CVE-2015-6634Android is

Sniffly: Uses HSTS and CSP to sniff browser history     Sniffly is an attack by using HSTS (HTTP Strict Transport Security) and Content Security Policy (Content Security Policy). It allows any website to sniff the user's browser history. This

Ctf encryption I have done in those yearsRecently, ctf has made a lot of work. By the way, I have made some notes, including several articles on encryption, implicit writing, reverse cracking, and web. After these articles are compiled, they will be

A provincial website of China Mobile 10086.cn SQL injection involves a large amount of data. A provincial website of China Mobile 10086.cn SQL injection involves a large amount of data. Injection of Jiangsu mobile B2B Mall, oracle database, can be

Further use of the Apsara stack SSH Backdoor How can I use this SSH backdoor to access the Intranet? Well, this is what this article will talk about. The backdoor obtains the root permission of the firewall, that is, all firewall operations can be

Weak Password of a website on Netease causes getshell to go directly to the Intranet for analysis. A simple weak password, simple and crude.  http://223.252.223.246:8080/manager/html Weak tomcat PasswordAdmin/adminYou can deploy the war package to

Miaoji travel multiple vulnerabilities sensitive information leakage/GetShell Mio travel (www.mioji.com) is China's first travel route customization Engine Based on AI technology. Use big data and intelligent technology to provide users with a

China Telecom Tianyi Platform System Vulnerability Getshell (Multi-province package submission) Who is Joker? Http: // **. **/login/userlogin WebPath:/data/www/terminal_jl/JilinHttp: // **. ** // login/userlogin

Information Leakage from China Life Official Website The website can freely refresh registered user information, and violently query user information to leak user information. The user information covers the real name, email address, and mobile

A GitLab platform vulnerability in Hang Seng leaked a large number of sensitive engineering source code. RtDetailed description: Http: // 60.191.25.162: 5222/users/sign_inRegister an account and log on The source code of the Internally shared

An enterprise-level call system has 11 SQL Injection Vulnerabilities (no DBA permission required) The same system is identified by multiple vendors. The case is evidence. This call does not require logon. Eleven files have the SQL injection

1905 Intranet roaming caused by an inflatable doll Intranet roaming caused by an inflatable doll has been obtained by the main site of www.w.5.com shell by the end of November. I will hear from my brother Jian Xin. 1. getshell caused by Nginx

A company leaked IDA pro6.8 to remove LAN Detection On July 6, Jinshan company employee error caused the official personal version of IDA pro6.8 to be completely leaked, including genuine installation packages, installation passwords, and