Cloud Security

JAVA serialization and deserialization and vulnerability remediation Last week, cyber security staff suffered a further setback in front of the black market. Joomla exposed high-risk 0-day vulnerabilities, which can be triggered without user login.

How can I disable mobile storage devices and USB flash drives by using the classified mobile storage media management system?USB storage devices such as USB flash drives and mobile hard disks are currently very popular storage tools, however,

Prohibit computer sharing files, group policies prohibit shared folders, and disable network sharingTo disable file sharing on a computer: Method 1: Cancel file sharing through the sharing settings of the operating system. The specific method is as

How to disable playing games on LAN computers, webpage games, and work gamesWhy do I prohibit local networks from playing games and blocking web games? The author believes that the following methods can be implemented:Method 1: Use the Restricted

Tryton-server Access Vulnerability (CVE-2015-0861)Tryton-server Access Vulnerability (CVE-2015-0861) Release date:Updated on:Affected Systems: Tryton Description: CVE (CAN) ID: CVE-2015-0861Tryton is a general application framework, licensed

Simple defense against multiple malicious server submissions Background: The continuous sending or malicious submission of requests by machines puts a lot of pressure on the server. The optimal strategy for this attack is to determine the number of

Floating HOME hotel chain stores Multiple SQL injections on a station (DBA permission/nearly orders) Floating HOME hotel chain  Http://www.piaohomeinn.com injection point: Http://www.piaohomeinn.com/hotelList? Shard id = 43  

Yahoo Mail XSS vulnerability details Analysis   This month, Yahoo Mail reported an XSS vulnerability that allows code to be embedded into special-format emails. XSS is automatically triggered when you preview an email. XSS vulnerability affecting

Reset any User Password Password retrieval in the wooden ant user center-reset the User PasswordThe password reset link encryption method received by the mailbox is too simple. You can perform the on-chip connection to reset any user password. I

Injection of tens of thousands of users (name, password, transaction password, region, mobile phone number, etc) I heard my boss sent an iPhone 6 plus?Injection of another store database to the main site Injection:  python sqlmap/sqlmap.py -u "https:

Okai airline Password Reset Vulnerability (required) Http://bk.travelsky.com/bkair/page/users/front/userLogin.jspPassword retrieval process1. Enter the user name and submit it (brute-force)    2. Enter the password retrieval question (the page

GETSHELL (involving payment interfaces), a financial platform of Anbang Insurance) An insurance server: http: // 123.127.251.8: 7001/console/login/LoginForm. jspFrom the project deployed in it, it should be stored and paid interface.Previously,

Kali Information Collection ~ 3. subdomain names 3.1 Netcraft: subdomain name query Official Website: http://searchdns.netcraft.com/ Enter the domain name to be queried to know the subdomain name. 3.2 Fierce: subdomain name queryOverview: Fierce

A command execution vulnerability in a system of huatai insurance threatens the Intranet. Command Execution System address:Http: // 219.141.242.62/huataiwechart/index_neu.jsp  Address: Where did the customer come from? huatai property insurance

Cisco Jabbar chat client vulnerable to man-in-the-middle attacks Cisco announced that its chat client Jabbar has a security vulnerability and is vulnerable to man-in-the-middle attacks. This vulnerability exists in the Jabbar on the Windows platform.

SQL Injection in China Railway Express causes a large amount of information leakage China Railway Express has SQL injection, leading to a large amount of information leakage (Code, login name, and password of each national Branch) Http: // **.

UPack's working principle and instance analysis (I) Everyone knows that the UPack is a common topic in Software Reverse Engineering. To understand the compression during runtime, You need to master the basic PE file format and basic knowledge of

Financial Information Leakage of nearly suppliers due to a system design defect in Yintai commercial \ arbitrary operation of any merchant \ Arbitrary File Upload Rt Http: // 122.224.218.142: 7070/supplier/jsp/index. jspOnline reconciliation

Webshell Security Detection (1)-traffic-based detectionI. Overview I have been paying attention to the security analysis of webshell, And I will share my experiences in this period of time. Webshell generally has three detection methods:The

Alexa: Top 3 SQL injection sites in China SQL Injection 1. Change X-Forwarded-For **. ** '.  GET / HTTP/1.1Host: **.**.**.**User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:42.0) Gecko/20100101 Firefox/42.0Accept: