Cloud Security

Nvidia gpu vulnerability exposure allows you to view pornographic website browsing history Chrome's stealth mode may not be able to protect personal privacy under certain circumstances. Recently, a game player has exposed a vulnerability on Nvidia

Wireshark PPI parser DoS Vulnerability (CVE-2015-8741)Wireshark PPI parser DoS Vulnerability (CVE-2015-8741) Release date:Updated on:Affected Systems: Wireshark Wireshark 2.0.x-2.0.1 Description: CVE (CAN) ID: CVE-2015-8741Wireshark is the most

Wireshark DCOM parser Denial of Service Vulnerability (CVE-2015-8714)Wireshark DCOM parser Denial of Service Vulnerability (CVE-2015-8714) Release date:Updated on:Affected Systems: Wireshark Wireshark 1.12.0 - 1.12.8 Unaffected system: Wireshark

DLL hijacking attack Guide The DLL (Dynamic Link Library) file is a Dynamic Link Library file, also known as "application expansion", and is a software file type. In Windows, many applications are not a complete executable file. They are divided

SQL injection vulnerability in a Kingdee system (with verification script) Kingdee system Injection VulnerabilityAs of November 8, 2015, the system had released more than 1.3 million mobile Internet users, with over 2.62 million

A System Defect in huatai insurance allows you to directly operate on the database to add, delete, and modify data (you do not need to log on to execute any SQL statement) Design defects Http: // 219.143.162.218/htwx/    POST http://219.143.162.218/

Getshell of a Huawei website Shell Career-whrc.w.wei.com/pages/handle/register.handle.phpFirst, register a number and then register it again.If a single quotation mark is added to the user name, the registration fails.It should be

Multiple SQL injections from a substation in Huawei A sub-station of Huawei, Oracle Database Http://consumer.huawei.com/support/services/service/tcsReservation/findReservationByReservationNo? Jsonp = jquery1910201111365258694_1448884905233 &

A site under Baidu has severe design defects Img src = "/upload/201511/30143343 e5dfc2f4553a0fde8f89dc00f8a889b5.png" alt = "2.png"/>Baidu bookstore domain name is ks.baidu.comI first registered a bookstore number,Then open http: //

A giant has many injections (an interesting addslashes that is sometimes absent) There was no small gift for the last vulnerability !! So I still have a question. Will this time be ignored?I gave up when I became the richest person. I can give it

Yuantong's website server fell (java deserialization vulnerability) Yuantong's website server fell (java deserialization vulnerability) The java deserialization vulnerability exists when a Site Server of yuantong falls down.Vulnerability address:

China Mobile mailbox system weak password can enter I entered the Mailbox System and saw a lot of sensitive information. I found a page without a verification code, so I came to a burp dictionary brute-force attack (I will not crack it with a

Kingsoft WPS: loading OLE object memory not initialized second play This is a problem with QQ controls. More users! QQ control appcom. dll is not initialized, resulting in 00000000 address access error (QQ needs to be installed)Self-evaluation

A certain potato system SQL injection to Getshell Rt Http://xianchang03.danmu.tudou.com/login.doThe potato bullet Screen System reported a weak password before, but there was actually an injection for login.Admin 'or '1' = '1 direct bypass

Destoon full-version waf Bypass Vulnerability Solution Strip_ SQL is the main security defense function of destoon. It mainly defends against injection vulnerabilities in most cases. This function can be bypassed. The injection vulnerability may

Wireshark DCOM parser Denial of Service Vulnerability (CVE-2015-8714) Affected Systems:Wireshark 1.12.0-1.12.8Unaffected system:Wireshark 1.12.9Description:CVE (CAN) ID: CVE-2015-8714Wireshark is the most popular network protocol parser.Wireshark 1.

Introduction to configurations related to preventing SQL injection attacks in Nginx The best way to prevent SQL injection is to filter and escape all data submitted to the background.For simple cases, such as single quotation marks ('), semicolons (;

A penetration test report from foreigners A penetration test report issued by offensive security, which translates the key content :) The process is wonderful ~ The domain name for this test is: Export corpone.com First, check its DNS Server: Then

Amazon EC2 host environment: mining SSRF vulnerabilities in Node/Express applications   I recently encountered an SSRF (Server Side Request Forgery) vulnerability when mining an application ). This application is hosted on Amazon EC2. Node. js and

Mining and defense of command execution vulnerabilities in the DVWA Series Common command execution vulnerability defense methods usually use two functions: EscapeShellCmd and EscapeShellArg. The following analyzes the two functions