Cloud Security

Cisco Prime Infrastructure XSS Vulnerability (CVE-2015-6434)Cisco Prime Infrastructure XSS Vulnerability (CVE-2015-6434) Release date:Updated on:Affected Systems: Cisco Prime Infrastructure Description: CVE (CAN) ID: CVE-2015-6434Cisco Prime

Proface GP-Pro ex d-Script Heap Buffer Overflow Remote Code Execution VulnerabilityProface GP-Pro ex d-Script Heap Buffer Overflow Remote Code Execution Vulnerability Release date:Updated on:Affected Systems: Proface GP-Pro EX Description:

Nvidia gpu vulnerability exposure allows you to view pornographic website browsing history Chrome's stealth mode may not be able to protect personal privacy under certain circumstances. Recently, a game player has exposed a vulnerability on Nvidia

Wireshark PPI parser DoS Vulnerability (CVE-2015-8741)Wireshark PPI parser DoS Vulnerability (CVE-2015-8741) Release date:Updated on:Affected Systems: Wireshark Wireshark 2.0.x-2.0.1 Description: CVE (CAN) ID: CVE-2015-8741Wireshark is the most

A Security System of China Unicom has a general SQL Injection Vulnerability (no DBA permission required) Rt China Unicom Primary and Secondary School Security SystemPost injection exists in the logon box.  POST / HTTP/1.1Host:

Xss In the 10000 community of Hubei mobile (484274 million monthly active users can species horses on a large scale) Total Population of Hubei Province)58.16 million people (2014)Even if it is removed, there will be 8.16 million... http://**.**.**.**

Kingsoft Xiaoyao mobile phone token can be bound to any account (the account is not bound to the token currently) I certainly cannot fall behind when my cousin is playing swordsman 3. Although people are still in the new hand village, there is

The best "CSRF protection" brings you into the circle of prawns!CSRFThe best "CSRF protection" brings you into the circle of prawns! What is CSRF? CSRF, usually known as Cross-site request forgery (CSRF), is a type of malicious website attack. A

There is SQL Injection on the kibablendiamond official website. The official website of Kimberly Diamond has SQL injection to get webshell. Sqlmap blind Injection Logon page  http://www.kimberlite.com.cn/index.php?r=site/flogin Injected

Reset the password of any account on the Android Client My daughter-in-law recommended me to use this APP, So she changed her password... When I registered with a mobile phone, I found that the verification code was 4 digits, and I felt that there

A giant has many injections (an interesting addslashes that is sometimes absent) There was no small gift for the last vulnerability !! So I still have a question. Will this time be ignored?I gave up when I became the richest person. I can give it

Yuantong's website server fell (java deserialization vulnerability) Yuantong's website server fell (java deserialization vulnerability) The java deserialization vulnerability exists when a Site Server of yuantong falls down.Vulnerability address:

China Mobile mailbox system weak password can enter I entered the Mailbox System and saw a lot of sensitive information. I found a page without a verification code, so I came to a burp dictionary brute-force attack (I will not crack it with a

A certain potato system SQL injection to Getshell Rt Http://xianchang03.danmu.tudou.com/login.doThe potato bullet Screen System reported a weak password before, but there was actually an injection for login.Admin 'or '1' = '1 direct bypass

Wireshark DCOM parser Denial of Service Vulnerability (CVE-2015-8714) Affected Systems:Wireshark 1.12.0-1.12.8Unaffected system:Wireshark 1.12.9Description:CVE (CAN) ID: CVE-2015-8714Wireshark is the most popular network protocol parser.Wireshark 1.

A penetration test report from foreigners A penetration test report issued by offensive security, which translates the key content :) The process is wonderful ~ The domain name for this test is: Export corpone.com First, check its DNS Server: Then

Amazon EC2 host environment: mining SSRF vulnerabilities in Node/Express applications   I recently encountered an SSRF (Server Side Request Forgery) vulnerability when mining an application ). This application is hosted on Amazon EC2. Node. js and

Mining and defense of command execution vulnerabilities in the DVWA Series Common command execution vulnerability defense methods usually use two functions: EscapeShellCmd and EscapeShellArg. The following analyzes the two functions

A vulnerability in digital shenzhou.com may cause millions of sensitive information leaks, including the mobile phone number of the user's specific address name. Ask for the homepage, and ask for 20 rank! 219.143.21346: 7002Weblogic applicationJAVA

Webshell Analysis for Juniper screnos Authentication1. Background The backdoor vulnerability of a vro has also been exposed many times before, but most of them are intentional by the manufacturer and the developers of the manufacturer are informed