Exploit-Database official GitHub Repository
This is the official Git repository of exploit Database, the famous Exploit website. Exploit Database stores a large number of vulnerability exploitation programs, which can help security researchers and
Linux Kernel 'fs/pipe. c' multiple local memory corruption vulnerabilities (CVE-2015-1805)Linux Kernel 'fs/pipe. c' multiple local memory corruption vulnerabilities (CVE-2015-1805)
Release date:Updated on:Affected Systems:
Linux kernel
Description:
Xen Denial of Service Vulnerability (CVE-2015-4104)Xen Denial of Service Vulnerability (CVE-2015-4104)
Release date:Updated on:Affected Systems:
XenSource Xen 3.3.x-4.5.x
Description:
CVE (CAN) ID: CVE-2015-4104Xen is an open-source Virtual
CentOS server security skills
Undoubtedly, improving server security is one of the most important tasks for system administrators. Therefore, there are many articles, blogs, and Forum posts for this topic.
A server consists of a large number of
CentOS System Security Settings Shell scriptWe create common system security configurations as a shell script. You only need to run this shell script on the server to complete the security settings.
The Shell script for Linux system security
Shell script checks and monitors the CPU usage of mysqlWhen the site traffic is large, mysql is under a high pressure. When the CPU usage of mysql exceeds 300%, it cannot provide services, and it is almost stuck. At this time, the best way is to
Shanda's website source code leaks. Getshell goes directly to the Intranet.
Git leaks, causing source code to be downloaded to the http://minigame.sdo.com/taojin/.git/config
Here, we will not describe the specific vulnerability exploitation details
The unauthorized deletion vulnerability of the Public Interest advertisement of Yiyun (the advertisement created by all users can be deleted)
An unauthorized operation vulnerability exists in the ad spaces created by the webmaster in the Yiyun user
Xin Yi Network (Master of Flash machine) A system login site SQL injection a large number of databases
Http://fx.mgyun.com/main/admin/login.aspx (POST) button1 = & TextBox1 = rrNqPVs & TextBox2 = 1 & __ EVENTARGUMENT = & __ EVENTTARGET = & __
Ultra-large Cookie Denial of Service AttackHave you ever wondered what will happen if the website has a very large Cookie?Not to mention, try it out immediately:
for (i = 0; i What is an error reported on the website?
As we all know, cookies are
Z-BLOG Blind-XXE causes Arbitrary File Reading
When I saw Yu Niu's z-blog, I also came to join in.One Blind XXE tutorial, No Logon required.
Download the latest Z-Blog: http://bbs.zblogcn.com/thread-88670-1-1.html/Zb_system/xml-rpc/index. php row 641
Mysql brute-force database Summary
1. Judge the version and ord (mid (version (), 4.0)> 51 and return normal. It indicates that it is later than version and supports ounion query.2. Number of fields to be guessed,You can also guess with order,You
Website mobile Version Vulnerability: SMS bombing + password cracking
1) retrieve the password on the mobile homepage of the official website without any verification information. If you enter a mobile phone number at will, a verification code will
Ipv6: multicast listening and Discovery Protocol (MLD)
The multicast listening Discovery Protocol is only available in ipv6. Its principle is that when the source host sends a copy of data to a multicast address, all members who join the multicast
A system of yuantong has sensitive information leakage and unauthorized access (case studies)
A system of yuantong has sensitive information leakage and unauthorized access (case studies)
Http://hr.f5.yto56.com.cn/hrss/ELTextFile.load.d? Src
You can reset the password of any user if you are not properly designed.
First, I applied for an account to test the product. But what I never expected was that the design of the website was full of loopholes. Let's talk about the problem from an
Arbitrary File Reading from a system on Shenzhen Airlines
The new cabin entertainment platform "yuntu" launched by Shenzhen Airlines has a vulnerability.Introduction:Http://digi.163.com/13/0412/18/8S9GGMJE001664LU.html
Vulnerability url:Http: // 192.
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.
A Free Trial That Lets You Build Big!
Start building with 50+ products and up to 12 months usage for Elastic Compute Service