Cloud Security

DoS attack analysis and Defense Analysis of 12 lines of JS Code There is a 12-line JavaScript code that can crash Firefox, Chrome, and Safari browsers, as well as restart the iPhone and crash android, the author of this article analyzes and

Technical Analysis of Long-standing path hijacking   Today, the technology I want to explain has existed for a long time, but as far as I know, there are not many articles that have explained this technology in detail and complete. Of course,

Python-RSA Security Restriction Bypass Vulnerability (CVE-2016-1494)Python-RSA Security Restriction Bypass Vulnerability (CVE-2016-1494) Release date:Updated on:Affected Systems: Python-RSA Description: CVE (CAN) ID: CVE-2016-1494Python-RSA

QEMU 'FW _ cmd_write () 'function Remote Code Execution Vulnerability (CVE-2016-1714)QEMU 'FW _ cmd_write () 'function Remote Code Execution Vulnerability (CVE-2016-1714) Release date:Updated on:Affected Systems: QEMU Description: Bugtraq id:

SAP NetWeaver Java as xxe Vulnerability (CVE-2016-3974)SAP NetWeaver Java as xxe Vulnerability (CVE-2016-3974) Release date:Updated on:Affected Systems: SAP NetWeaver Java AS 7.4 Description: CVE (CAN) ID: CVE-2016-3974SAP NetWeaver is the

ProFTPD mod_tls module vulnerabilities (CVE-2016-3125)ProFTPD mod_tls module vulnerabilities (CVE-2016-3125) Release date:Updated on:Affected Systems: ProFTPD Project ProFTPD ProFTPD Project ProFTPD 1.3.6 Description: CVE (CAN) ID: CVE-2016-31

Squid DoS Vulnerabilities (CVE-2016-3948)Squid DoS Vulnerabilities (CVE-2016-3948) Release date:Updated on:Affected Systems: Squid Squid 〈 3.5.16Squid Squid Description: CVE (CAN) ID: CVE-2016-3948Squid is an efficient Web Cache and proxy

Nod32 registration code 2016 latest nod32 registration code sharing eset nod32 username and password Download the latest nod32 activation code: Note: (Note: When this tool runs, it first verifies the eset id (all versions are supported). If it is

PETYA ransomware: encrypts the entire hard disk and locks the user's computer Recently, security experts have discovered a new type of ransomware, Petya, which can cause a computer blue screen crash (BSoD) and before the operating system is loaded,

TDE encryption and Cracking Analysis of Microsoft SQL Server transparent data (II)General Data Encryption Everyone thinks that encryption is a good thing, but it does not take into account specific attack scenarios. This idea has become a trend, but

Weaver collaborative commerce system e-cology SQL injection (with verification transfer script) Find one.Http: // **. **/services/MobileService? For exampleUse wvsCheckUserLogin MethodThe three parameters are numeric, numeric, and numeric. 3 is

A gps scheduling station of Anhua agricultural insurance has the java deserialization vulnerability, which can directly write a large amount of leaked policy information (name, mobile phone number, and other sensitive information) Http: // 221.8.57.

Fifth Report: China Insurance Radmin weak password control Business Core System/Intranet penetration I am sorry for five consecutive

Basic Analysis of threat intelligence: crawling, walking, and analysis (Part 3) This is the last article (1 and 2) of the threat intelligence basic trilogy. This article will continue to discuss how threat intelligence is implemented in security

An Sheng Tianping's other system can use Getshell to cause leakage of sensitive information such as a large number of user identity policies. I accidentally found another one. Previously Submitted a WooYun: the auto insurance system Getshell of

A website of Anhua agricultural insurance has the Java deserialization vulnerability, which causes Getshell to connect to the database. RT Verification: http: // 221.8.57.99: 7002/uddiexplorer/1.jsp? O = vLogin password: MWAsk the vendor to delete

Starling stars FlowEye intrusion-Explanation of WebService application Vulnerabilities WebService is a Web application branch that can execute any function from simple requests to complex business processing. After deployment, other WebService

55bbs email system SQL injection requires parameter Filtering 55bb mail system SQL Injection injection link: http://pop3.55bbs.com/extmail/cgi/index.cgihttp://smtp.55bbs.com/extmail/cgi/index.cgi Injection Parameter: domain (POST) Type:

How to turn Self-XSS from the Uber Bug rewards program into Good-XSS At present, the Uber Bug rewards program has been open to the public, and now I can easily give my suggestions to Uner. On the Uber partner page, a host is used to log on to and

Nmap memo form: Part 1 from discovery to vulnerability utilization analysis     During the investigation, the initial phase of information collection is scanning.What is investigation? Investigation is to collect as much information as possible on