Cloud Security

Cisco CUCDM web SQL Injection Vulnerability (CVE-2015-0684) Release date:Updated on: Affected Systems:Cisco uniied Communications Domain Manager 8.1 (4)Cisco uniied Communications Domain ManagerDescription:CVE (CAN) ID: CVE-2015-0684 Cisco uniied

Cisco Unity Connection SIP relay Integrated Port UDP 5060 DoS Vulnerability Release date:Updated on: Affected Systems:Cisco Unity ConnectionDescription:CVE (CAN) ID: CVE-2015-0612 Cisco Unity Connection is a fully functional voice messaging

Tor Denial of Service Vulnerability (CVE-2015-2929)Tor Denial of Service Vulnerability (CVE-2015-2929) Release date:Updated on:Affected Systems: Tor Description: CVE (CAN) ID: CVE-2015-2929Tor is an implementation of the second generation of

Remote code execution in the cheetah Browser 1. download the latest version of the cheetah Browser: KSbrowser_5.2.85.9616.exe 2. Through analysis and observation of some User-Defined Function interfaces implemented by the cheetah (Some APIs under

Defend against attacks 0 × 01. Preface I am a cainiao security engineer. I had the honor to have participated in two security competitions, and some people had some personal experience, so I had this article.‍‍‍‍0 × 02. What will attackers do?‍‍‍‍ I

Shell interview questionsUse the top script to retrieve the CPU of a process:#/Bin/shMax_CPU = 0Avg_CPU = 0Total_Time = 1Process = $1Interval = $2# Check the parametersIf [$ #-ne 2]; thenEcho "Usage: $0 ProcessName Interval"ExitFiLogFile =

Commonly used iptables scripts #! /Bin/bashexport PATH =/sbin:/usr/sbin:/bin:/usr/biniptables-Fiptables-Xiptables-Z # remote SSH Login, we need to enable port 22 iptables-a input-p tcp -- dport 22-j ACCEPT # WEB server, enable port 80 iptables-a

Grub Password and user permissions for CentOS System Security 1. Add the grub Password in linux . Use the grub-md5-crypt command to generate the encrypted MD5 code Grub-md5-crypt>/boot/grub. conf Enter the password twice in the blank space and

Php user-defined function for generating random passwords Generate a random password function. The generated password is a random string of lowercase letters and numbers. The length can be customized. /* * Php automatically generates a

Any vote of DamiCMS Any vote of DamiCMS The key code for voting is as follows. foreach($_POST['vote'] as $v) { var_dump($v); $v = str_replace("\n","",$v); $s =

Doyocms parallel permission issue-order Leakage Doyocms parallel permission issue-order Leakage Order unauthorized view VulnerabilityThe problematic code is located at source/member. php.  function

Doyo website construction program parallel permission problem 2 Doyo website construction program parallel permission problem 2 I checked the logic of doyoCMS and handed it to wooyun to see if it was a vulnerability.The first issue is the code

Summary Web application browser-based security vulnerabilities SummaryWeb browsers or mobile browsers act as intermediaries between users and the Internet. In daily life, we use Google Chrome, Mozilla Firefox, Internet Explorer, Opera, safari. As

Hubei Agricultural Machinery Safety Supervision promotion information network stored XSS + SQL injection (Cookies already exist) Hubei Agricultural Machinery Safety Supervision promotion information network stored XSS + SQL injection (Cookies

Attackers can exploit some design defects of Renren to attack internal network applications. Attackers can exploit some design defects of Renren to attack internal network

MOOC web IOS client SQL injection (with script) When you click a course on the iOS client, the post request is as follows: POST/api2/getmediainfo_ver2 HTTP/1.1 Host: www. imooc. comProxy-Connection: keep-aliveAccept: */* Accept-Encoding: gzip,

A wonderful file upload on ZTE bypasses GetShell After a long time, I finally uploaded it. Come to the homepage ~ http://www.appstar.com.cn On the ZTE application star website, we saw a Common File Upload Bypass Vulnerability. Next let's take a look

XML security-Web Services0x01 Introduction Some time ago, I encountered related technologies related to ws in the trs system. Not long ago, when I was playing a xx Hotel, I went to its database through ws, later, I met or saw XML-related

Mining and Analysis of JiaThis Flash XSS According to WeChat Weibo, the website www.jiathis.com has an XSS vulnerability, which can cause vulnerabilities on any website that uses JiaThis. With this clue, we will start to analyze the XSS principles

False or false: Use the Instagram API to create malicious sharing links Security researchers recently discovered a malicious sharing link using the Instagram API, which is easily believed and downloaded by users because it points to the Instagram