Cloud Security

Privilege Escalation using Use-After-Free (UAF) in Linux Kernel Last month, the CVE-2016-0728 Local Elevation of Privilege Vulnerability let everyone's eyes again focused on Linux kernel security. Like CVE-2015-3636, CVE-2015-7312, and CVE-2014-2851,

How to prohibit thunder downloading, how to prohibit thunder downloading on routers, and how to prohibit thunder downloading on computersThunder is the fastest P2P software in China, which consumes an astonishing amount of resources on the company's

Vro limits others' network speeds, vro controls computer network speeds, and vro limits LAN traffic settingsIn order to prevent the LAN from snatching network speed and traffic, we sometimes need to use the network speed control software to evenly

Concepts about RSA, public key, private key, encryption, and signaturePreface As a programmer, I often hear such words as encryption and decryption. Asymmetric encryption is widely used. This article does not describe the principles of encryption

The master site of Qijia network has SQL Injection ~~~~ Injection Point http://www.jia.com/citylist/ask_city_list.php? Callback = jQuery172026691810227930546_1452738150949 & provinces = 1 * & _ = 1452738167755Injection parameter

Getshell is caused by incorrect configuration of a payment system platform of huatai insurance. Getshell caused by improper System Configuration Http: // 219.141.242.77: 7005/Alianture_frame/login. do  The system's jmx-console has a head bypass and

An old system in Qijia, GETSHELL, to the Intranet No highlights Access:Http://chajian.jia.com/kaoshi/I don't know what the system is.Then openHttp://chajian.jia.com/kaoshi/admin/Admin-> adminFruitless.Later I looked at Qijia's vulnerability and

A weak POST password in a system of the giant's network causes SQL injection (which may affect 0.15 million order security + 400 users) SQL Injection caused by weak passwords The description has been declared:The injection points are not the same. I

Letao main site Injection Vulnerability Find a sister's mobile phone number and find that he has bought things in happy Tao. Look for his vulnerability. POST/web_service/registration_ws.aspx? Op = getparticipant pantlistbyletter HTTP/1.1 Host: www.

APP security-SQL Injection in official Chinese mobile apps SQL Injection for APP security Target: Official mobile APP in ChinaCheck that SQL Injection exists in the following places: (data [1] [iid]/data [2] [iid]/data [3] [iid]/data [4] [iid ],

Execution of a system command on Meituan involves unauthorized access to the project source code and Intranet. Rt http://43.241.211.74:8080/     Command ExecutionNt authority \ system  Intranet environment    SonarQube unauthorized access  http:

XSS exploration: a wonderful journey to link available points Macy's (http://www.macys.com/) is the site's Alexa ranking of 241st when I published this article, it is a very valuable website in terms of traffic, but from the security point of view,

Downloading a weak password from a core operating system of yuantong to any file Downloading a weak password from a core operating system of yuantong to any file Http://jingang.yto56.com.cn/exptrack/logout.actionYuantong account: 00019484Password:

A system vulnerability package of CNPC can threaten the Intranet. Rt A system vulnerability package under CNPC can threaten the Intranet.System address: http: // 61.158.56.15: 7001/logonAction. do  1 # download any fileHttp: // 61.158.56.15: 7001 //

SQL Injection for a station in chelaile City ~~~~ Injection Point http://app.cheshi.com/substation/ad.php? Province = 21 & city = 299 & pid = 1 *Injection Parameter pidTime-based blind injection. Data can be obtained. It is very slow and easy to

An SQL injection vulnerability exists in a website of Zhiyin manke (involving million user information and passwords) Database: comicTable: mk_user[53 columns]+ ------------------ + -------------- +| Column | Type |+ ------------------ + ------------

Use Sohu mailbox XSS to hijack user mail Use Sohu mailbox XSS to hijack user mail 1. This vulnerability exploits functions.  ContentWindow2. This function allows the parent window to obtain the content of the subwindow, provided that the content of

A large number of users in the giant's network can log on to multiple systems with their default passwords A large number of users in the giant's network can log on to multiple systems with their default passwords Http://wooyun.org/bugs/wooyun-2010-0

A system vulnerability in heihu. getshell can control official website advertisements. RT Main Site:  http://www.hihuu.com/     Http: // 120.55.138.90/Weak PasswordLifang: 123456High Permissions      There are multiple upload injections in the

Netease series mailbox versions with long-lasting mail titles xss Netease 126 yeah 163 5.0 users can receive all emails from each other when they open their inbox. Netease mailbox 5.0 still has a large number of users, because 5.0 is relatively