Cloud Security

Author: Qingtian Xiaozhu Test environment: discuz X1.5 + nginx 1.0Vulnerability file source/function/function_core.php, code: $ _ G ['setting'] ['domain '] ['app'] ['default'] & $ content = preg_replace ("/ Code: Http://www.bkjia.com/forum.

By: Qingtian Xiaozhu Look at the side station, it's all his sub-domain name. The source code of the main site is fengxun 4.0, which does not have 0 days. You can only view the side station ~! A It shows that the main site is not built, so I

========================================================== ==============Secur-I Research Group Security Advisory [SV-2011-004]========================================================== ==============Title: NetSaro Enterprise Messenger v2.0 Multiple

Title: MiaCMS v4.9.0 Multiple Remote File compression sion VulnerabilitiesAuthor: KedAns-Dz www.2cto.com# E-mail: ked-h@hotmail.com (ked-h@1337day.com) | ked-h@exploit-id.com | kedans@facebook.comPlatform: phpLevel: Remote File/Sh3lL compression

Jsoncallback filter UTF-7 BOM. However, there is still mhtml XSS injection.Detailed description: IE6 IE7 Proof of vulnerability:Mhtml: http://survey.finance.sina.com.cn/api/fusioncharts/get_from_data.php? Sid = 48302 & aid = 18099 &

Now I want to talk about the 40-bit Decryption Method to everyone about the 40-bit encrypted data. In fact, it is still MD5 encryption, but some changes have been made:Take admin as an example,Admin's 16-bit and 32-bit ciphertext:7a57a5a743894a0e2123

Now there must be many websites using nginx. Since the nginx Parsing Vulnerability N months ago, it has been fixed almost all the time. The general statements are written in this way. If ($ fastcgi_script_name ~ \ .. * \/. * Php ){Return 403;}

A server is suspected of being infected with a Trojan. Baidu searches the website and most of the results are pornographic websites.Log on to the server immediately (in the middle of the night ). Perform the following steps:1. Check the system

Recently, we used a template for the zhirui enterprise website. (This template is downloaded from all major websites and marked as free use and free software.) I feel that the framework architecture is clear and simple, the most important version is

  1. Quote ', which is the most commonly used       2. Change the parameter type. For example, changing id = 1 to id = a is sometimes very effective.       3. Add data randomly. For example, changing id = 1 to id = 1111111111111111111111... is

  Parameters are not filtered. The parameters of crossDomainIFrame and crossDomainUrl can be modified. Proof of vulnerability: Http://ptlogin.4399.com/ptlogin/regFrame.do? Export & appId = my & gameId = & regIdcard = true & mainDivId =

  Today, on Weibo, I saw a senior who recommended a so-called driver-level WEB Security Detection System, wondering if it was in the kernel to implement the WAF function, so I downloaded it and looked at it. I found that this system has only one

  Title: GotoCode Online Bookstore Multiple Vulnerabilities Defect category: Privilege Escalation/Remote Database Download By Nathaniel Carew www.2cto.com Email: njcarew@gmail.com Level: High : Http://www.gotocode.com/apps.asp? App_id = 3 & Platform:

  Title: MyBB Forum Userbar Plugin (Userbar v2.2)   Author: Mario_Vs www.2cto.com: mario_vs [at] o2.pl   --------------------------------------------------------------------- Description> Developer:

  Title: Cotonti CMS v0.9.4 Multiple Remote Vulnerabilities Author: Cotonti Team www.2cto.com Developer: http://www.cotonti.com Affected Versions: 0.9.4 (Siena) Summary: Cotonti is a powerful open-source web development   Framework and content

The Php environment is generally apache + php + mysql, and the common configuration server is to open php. in the security mode in ini, set safe_mode to on, and set display_erors to off To Disable Error display. There is also an important

USB keys are no stranger to friends who often use banks, but how can they protect their websites?Required materials: a useless USB flash drive (provided that it can be used), a USB flash drive mass production tool, and an e-language compiling

  Brief description: Http://uyan.cc is the newly established community comment entrepreneurial company, its SQL filter lax caused by vulnerabilities. Detailed description: The http://uyan.cc/index.php/youyan_content/getRepliesTogether/time does not

  1. directly access default. aspx after the directory is guessed (you may need to modify the uploadid parameter. You can see the specific packet capture, but undefined is not allowed)   2. Upload and test, capture packets   3. Modify the

Starting this post with that image seemed appropiate. This one is really easy and lots of servers use this crap called SolusVM./Centralbackup. php:If ($ _ POST ['delete']) {$ Xc = $ db-> query ('select * FROM centralbackup WHERE id = \ ''. $ _ POST [