Cloud Security

Exploration of CVE2015-0057 vulnerability Sample Construction0x01 analysis As the vulnerability mentioned in the analysis article is caused by xxxEnableWndSBArrows, create a ScrollBar through createjavaswex, call EnableScrollBar, and execute it to

Cisco IOS Software DoS Vulnerability (CVE-2015-0608) Release date:Updated on: Affected Systems:Cisco IOSDescription:Bugtraq id: 72566CVE (CAN) ID: CVE-2015-0608 Cisco IOS is an interconnected network operating system used on most Cisco system

UniPDF 1.1-Crash PoC (SEH overwritten) # Exploit Title: UniPDF v1.1 BufferOverflow, SEH overwrite DoS PoC# Google Dork: [none]# Vendor Homepage: http://unipdf.com/# Software Link: http://unipdf.com/file/unipdf-setup.exe (Redirect to:

Disputes Caused by sa downgradingIn actual penetration, sa is often downgraded.I have been discussing this issue with a friend just now. I think it is not just a sentence or a sentence to clarify this issue. I simply post a post to discuss it with

Fixes the replay Function of Live HTTP Headers, a common security test plug-in for Firefox browsers. Live Http headers is a powerful tool for capturing Http header information in Firefox and is often used for security testing. Unfortunately, the

How to Set tomcat securitySecurity reinforcement: Tomcat is the hardest hit area. So we sorted out Tomcat security reinforcement. 1. upgrade to the latest stable version. Currently, Tomcat supports versions 6.0 and 7.0. 1) For stability

FreeBSD SCTP stream Reset Vulnerability (CVE-2014-8613) Release date:Updated on: Affected Systems:FreeBSDDescription:Bugtraq id: 72345CVE (CAN) ID: CVE-2014-8613 FreeBSD is a UNIX operating system. SCTP provides reliable, throttling, and

Quick and effective attack source disconnection in emergency response As we have said before, if the attack source cannot be cut off as quickly as possible during the entire emergency response process, you will find that your system is always

BYD's Customer Management System Remote Command Execution causes the server to fall and can penetrate through the Intranet CRM Customer Management System Http://crm.byd.com.cn/login.jsp  Http://crm.byd.com.cn/login! CheckUserFront. actionRemote

Check whether the mysql database has a bad table shell script. Shell scripts detect and check whether a bad table exists in the mysql database This script is mainly used to detect all databases on the mysql server or bad tables in individual

How to Prevent SQL Injection in Pyhton The Code is as follows: c=db.cursor()max_price=5c.execute("""SELECT spam, eggs, sausage FROM breakfast WHERE price Note that the separator between the preceding SQL string and the subsequent tuple is

MYSQL injection from a station in Zhongguancun online (ascll code bypasses waf skills) Website: active.zol.com.cn Parameter blind InjectionFiltering is available, but it can be bypass.  GET/09 active/vote/index. php? Id = 4353% 20and % 20if

How can we better implement Web application penetration testing? The more enterprises rely on network communication and cloud-based data systems, the more likely they are to be attacked and damaged by external attackers. When considering the data

CVE-2015-2080 Analysis Jetty is a widely used java container. When developing java Web applications, jetty is used as an embedded container, which is very convenient for debugging. Many large Internet companies use it to replace tomcat. As far as I

Sina reads data from any file to GetShell.   Start with a seemingly tough page.Http: // 123.125.106.97/test/data. php what is this?  Well, he taught me to input two parameters.  please input 'date=&type=' If you just input two values and find that

China Mobile's school news, people-to-people, And Getshell contain more than 20 database information China Mobile Communications Group Co., Ltd. is a subsidiary of China Mobile Communications Group. The Getshell website allows hackers to connect to

Any user password can be reset if the user password is improperly set at a certain part of yunda Express You can reset any user password in the password retrieval area.On the registration page, scan several registered user mobile phone numbers.  

Reconstruction of the source code of a station of CNPC to GetShell Reconstruction of the source code of a station of CNPC to getshell 1.85.51.141 git source code LeakageCorresponding Domain NameHttp://mtp.cnpc.com.cn        Audit

Official CSRF of China Network TV Recently, I visited CNTV and found a csrf vulnerability. Then it is found that CNTV reffer has no effect on csrf.Of course, you have not seen the token to defend against csrf.It is mainly used to fl Weibo powder on

Mawaidi's website or injection of root permissions (with verification scripts) Http://cmccsh.wiwide.com/login login universal password login, SQL blind note Admin 'or 1 = 1 #Failed:  When correct:  The script runs to the result:User; root @