Cloud Security

A large number of hikvision video surveillance systems have the openssl vulnerability. A large number of hikvision video monitors have the openssl vulnerability to leak important information (including account and password)Hikvision video

Exploration of CVE2015-0057 vulnerability Sample Construction0x01 analysis As the vulnerability mentioned in the analysis article is caused by xxxEnableWndSBArrows, create a ScrollBar through createjavaswex, call EnableScrollBar, and execute it to

Cisco IOS Software DoS Vulnerability (CVE-2015-0608) Release date:Updated on: Affected Systems:Cisco IOSDescription:Bugtraq id: 72566CVE (CAN) ID: CVE-2015-0608 Cisco IOS is an interconnected network operating system used on most Cisco system

The latest version of sogou browser has a defect (which can be exploited by man-in-the-middle attacks to implant Trojans) The latest version of sogou browser. the upgrade process can be exploited by man-in-the-middle attacks, so that the machine

Disputes Caused by sa downgradingIn actual penetration, sa is often downgraded.I have been discussing this issue with a friend just now. I think it is not just a sentence or a sentence to clarify this issue. I simply post a post to discuss it with

Linux Kernel: isofs endless loop This problem is very similar to the CVE-2014-5472, but the root cause is different, is the kernel in the processing of the Rock type file expansion of the endless loop problem. This problem is caused by the isofs

FreeBSD SCTP stream Reset Vulnerability (CVE-2014-8613) Release date:Updated on: Affected Systems:FreeBSDDescription:Bugtraq id: 72345CVE (CAN) ID: CVE-2014-8613 FreeBSD is a UNIX operating system. SCTP provides reliable, throttling, and

Check your IPv6 address component to prevent it from being vulnerable. IPv6 "neighboring discovery" (ND) is the core part of the IPv6 protocol stack. It is used for IPv6 address resolution and automatic configuration of IPv6 stateless addresses.

Analysis of server-side Request Forgery-type network attack (SSRF) Through Server Request Forgery (SSRF), hackers can use your network application to send requests to other applications running on the device, or send requests to servers in the same

UWA 2.X v2.1.5 Multiple SQL injections Look at this function /Core/lib/core/Db. class. php protected function parse_value($value) {if(is_string($value)) {$value = '\'' . $this->escape_string($value) . '\'';}elseif(isset($value[0]) &&

XSS cross-site scripting vulnerability explanation and Protection What is "xss cross-site scripting "? Baidu encyclopedia says this: Cross-Site Scripting (XSS) is not the abbreviation of Cascading Style Sheet (CSS, therefore, cross-site scripting

Fanke network resets any User Password Fanke, the largest self-service website building platform in China. When I visited the website in my spare time recently, I accidentally found that several websites were self-built on the fanke platform. I

Reconstruction of the source code of a station of CNPC to GetShell Reconstruction of the source code of a station of CNPC to getshell 1.85.51.141 git source code LeakageCorresponding Domain NameHttp://mtp.cnpc.com.cn        Audit

The POC script is attached to another SQL blind note in Sohu focus home A Boolean blind note in the focal point home, with a JS script, is only used for vulnerability verification. 1. Injection

SQL Injection and solution for a financial management system in shenzhouhaotian Google inurl: xm_zhuce.aspx OrBaidu or Google Great-ChnOr content. aspx? Lb = dlVulnerability files:Xm_zhuce.aspxSimple judgment: DropDownList1=gxzhcx&bmbh=1&xmbh=2&fzr=3

ThinkPHP 3.0 ~ 3.2 SQL injection vulnerability details and exploitation  0x00 background   Thinkphp vulnerabilities have been frequently discovered recently. These vulnerabilities are extremely harmful. They should all be vulnerable to existing

Leeco's important business injection can cause a large amount of enterprise information leakage. The killer detects that variable overwrite leads to arbitrary injection. Http://www.letvcloud.com/www.tar.gz Leeco cloud has backup

Letv cloud main site getshell The Leeco cloud main site can use getshell because of the design permission on the code. Http://www.letvcloud.com/api/docdownload? Filename = .. /.. /.. /.. /.. /.. /.. /.. /.. /.. /.. /etc/passwd can be downloaded from

UWA 2.X General website construction system XXOO Gift Packs Welcome to UWA 2.X, which is a general site building system developed by AsThis based on PHP and MySQL. The program is simple, flexible, and has powerful scalability. It will be your first

Usage of Mysql injection points after the limit keyword There are countless articles describing SQL injection methods. This article describes a special scenario. Details In a test, I encountered an SQL injection problem. I did not find a solution on