Cloud Security

OLEOutlook exploitation: one email bypasses all Enterprise Security Prevention and Control In this article, I will show you how to embed an executable file into the company network by Email. Disguised as a Word document that bypasses the firewall.

Proface GP-Pro ex d-Script Heap Buffer Overflow Remote Code Execution VulnerabilityProface GP-Pro ex d-Script Heap Buffer Overflow Remote Code Execution Vulnerability Release date:Updated on:Affected Systems: Proface GP-Pro EX Description:

Simple defense against multiple malicious server submissions Background: The continuous sending or malicious submission of requests by machines puts a lot of pressure on the server. The optimal strategy for this attack is to determine the number of

The best "CSRF protection" brings you into the circle of prawns!CSRFThe best "CSRF protection" brings you into the circle of prawns! What is CSRF? CSRF, usually known as Cross-site request forgery (CSRF), is a type of malicious website attack. A

Unauthorized access to multiple systems of Didi chuxing is informative Didi to make travel better Unauthorized 1: displays the number of online users per minute and client crashes and crashes of Android and IOS users on Didi chuxing (Millions of

A website vulnerability in Great Wall insurance (resulting in leakage of a large amount of confidential information) Similar to previous site vulnerabilities, but not in the same location, not repeated vulnerabilities ~~~ Http://oa.ccib.com.cn/login.

Another weak password on Netease caused Getshell Simple, a weak password, simple and crude. Check http: // 123.58.179.79/whois to verify that this ip Belongs To Netease. An LNMP installation completed interfaceThe phpinfo and phpmyadmin interfaces

The leakage of important information of Shenzhen yingpeng playke company caused 5 million users to be in a hurry. Why can't I see the animation? I haven't looked at his mother for three days. Will you please fix it.First of all, I have never been

From weak passwords to Getshell Getshell System address: http: // 219.141.242.62/iucp  At first, I didn't know it was huatai's system.Weak Password admin/admin after Logon    Send Group messages  You can upload a shell file to the image library

58. Arbitrary user hijacking and logon caused by improper design of an app in the same city 58. An app in the same city is improperly designed, resulting in hijacking of arbitrary users 58 The logon function of the Home Express app (ios) is

A certain part of wasu data leakage can connect to the database RT Https://github.com/fucifer/learn/blob/07f3ddd8bf3568d1033cf040792912b9e0023a34/dphd/src/main/resources/env/config.propertiesLeakage of database addresses and passwords    The

Sensitive Information Leakage of a GM System   First, svn leakage, http://qa.tank.duowan.com/manage/.svn/entries However, I found that svn could not view any files, but I can know the approximate directory and directly access the source code

A Chinese mobile game station remotely executes getshell over the Intranet. Struts2 Remote Command

Meizu mobile media service SQL Injection Vulnerability When the file name of the SQL injection vulnerability in meizu mobile media service is enclosed in quotation marks, the Media Service may have the risk of SQL injection. The direct impact is

See how I read tens of thousands of e-books for free (with test scripts) I was going to buy this code for auditing. As a result, the paper version is sold out, so buy an electronic version .... Buy ebook here: http://product.china-pub.com/ebook489421

A talent Employment Network SQL injection (DBA permission) A talent employment network in a city can inject SQL statements, leading to a large amount of information leakage. The DBA permission can be directly revoked from the shell. Http: // **.

Analysis of getshell vulnerability in VIP chat uploading on Dahan Network Dahan network vipchat upload getshell Vulnerability Step 1: forge the session value: clusteridAddress:/vipchat/VerifyCodeServlet? Var = clusterid Send request:

Some information of the customer's call center system is leaked due to improper configuration of the piglet short-term rental service. RT pig Customer Service Call CenterScan for a svn leak Http: // 114.112.92.106/. svn/entries Call Center

The execution of Getshell on a certain Beijing mobile site involves millions of users. The previous vulnerability administrator never gave it, so sad... @ haotian @ Ah L Chuan The problem is as follows:Beijing mobile app has the Struts2

Webshell Analysis for Juniper screnos Authentication1. Background The backdoor vulnerability of a vro has also been exposed many times before, but most of them are intentional by the manufacturer and the developers of the manufacturer are informed