Cloud Security

Emlog automatic backup plug-in leakage full-Site Database Backup Vulnerability This is the third time I found a critical vulnerability in my blog. The first time is a third-party storage, the solution is deleted. The second is "EMLOG album", that is,

58. A home system has a large number of weak passwords Detailed description: Reference WooYun: Zhiyuan A8-V5 arbitrary User Password Modification VulnerabilityHttp://oa.daojia.58.com//seeyon/getAjaxDataServlet? S = ajaxOrgManager & M =

Kerberos protocol vulnerability: The system is completely controlled. Recently, security experts have discovered a "very destructive" vulnerability in Windows's Kerberos Authentication System. Last year, a similar vulnerability in the system was

Elevation of Privilege in WindowsImagine this: You got a Meterpreter session on a machine, and you are ready to rungetsystemCommand, but if the request fails, are you ready to admit it? Only a coward can admit defeat. But you are not, are you? You

OWASP's top 10 Web security problems are totally out of control in the JEE System Although Java ee has some excellent built-in security mechanisms, it cannot fully cope with various threats facing applications, especially many of the most common

Vulnerability Analysis and exploitation of Windows Media Center Released by Microsoft in September 8 this yearMS15-100 Security noticeFixed the remote code execution vulnerability in a Windows Media Center. If Windows Media Center opens a specially

Google Chrome FontData: Bound Function Integer Overflow Vulnerability (CVE-2015-6781)Google Chrome FontData: Bound Function Integer Overflow Vulnerability (CVE-2015-6781) Release date:Updated on:Affected Systems: Google Chrome Description:

Android Media Framework Information Leak Vulnerability (CVE-2015-6628)Android Media Framework Information Leak Vulnerability (CVE-2015-6628) Release date:Updated on:Affected Systems: Android Android 6.0 Description: CVE (CAN) ID: CVE-2015-6628

Android mediaserver Memory Corruption Vulnerability (CVE-2015-8505)Android mediaserver Memory Corruption Vulnerability (CVE-2015-8505) Release date:Updated on:Affected Systems: Android Description: CVE (CAN) ID: CVE-2015-8505Android is a

How advanced hackers find Network Security Vulnerabilities   Hackers always want to know as much information as possible, such as whether to connect to the Internet, the internal network architecture, and the status of security measures. Once

Modbus TCP traffic analysis Modbus protocol Modbus is the world's first bus protocol for industrial field use. ModBus uses Master/Slave (Master/Slave) communication. A maximum of 247 slave controllers are supported, but the number of actually

The concept of "man" is not earth, "Fire Fighting" is fierce, and President Tan's methodology | focus on hackers and geeks This series of articles is produced by Ann in the new information security media. Any opinion or position in the interviews is

Quick and efficient cracking of MySQL local and remote passwords Quick MySQL local and remote password cracking! The first thing we need to explain to the database maintenance personnel is that you don't have to worry about it. You don't have to fix

A vulnerability in ruiqibao allows you to log on to an account at will. Ruiqibao Internet Financial Management Investment and Financing platform is a P2C Internet Financial investment platform established by Beijing ruiqibao Information Service Co.,

Unauthorized access to orders by travel users leads to leakage of a large amount of sensitive information (including ID cards) Access control measures are not implemented, so that users can access all other orders without authorization, resulting

Use location to deform our XSS Payload This article is a gesture I learned from a group some time ago. I will share it with you ~ In XSS, sometimes some filters are abnormal and filter many special symbols and keywords, such as &, (,), #, ', and ",

The main site of Shi nun's milk powder, getshell, involves millions of member users (a large increase in baby data after the establishment of the second child) (After the establishment of the second child, there is a large increase in baby

A website of China Telecom has SQL injection, which affects millions of users in multiple databases (DBA permission) Millions of usersDetailed description: Injection point:Post POST /admin/zhuanPan_listJp.do HTTP/1.1Host: **.**.**.**User-Agent:

An SQL injection vulnerability exists in a management system of Faw. RtDetailed description: Post injection POST/pub_yz.jsp HTTP/1.1Content-Length: 95Content-Type: application/x-www-form-urlencodedX-Requested-With: XMLHttpRequestReferer.

Attackers can execute arbitrary SQL statements by bypassing the latest website security dog (IIS) protection rules. Attackers can execute arbitrary SQL statements by bypassing protection rules...Detailed description: There are still many websites