Cloud Security

Light stop parking skipped payment completed order and refund to account (Brush parking fee) Light stop parking, due to business logic design defects, you can directly skip the payment steps to complete the parking space booking, at the same time,

Honeywell 93gas Detector information leakage (CVE-2015-7908) Affected Systems: Honeywell Midas gas detectors Honeywell Midas Black gas detectors Description: CVE (CAN) ID: CVE-2015-7908 Midas and Midas Black gas detectors are detectors used to

Siemens ruggedcom rox-based device Authentication Bypass Vulnerability (CVE-2015-7871) Affected Systems: Siemens ruggedcom rox Description: CVE (CAN) ID: CVE-2015-7871Siemens ruggedcom rox-based devices are used to connect devices in harsh

Ao you browser design defects control user browsers A browser design defect caused the browser to be controlled. The latest version of Ao you Browser:  The main reason is that the cloud tag has a problem and the title is not filtered. Because the

FFmpeg ff_dwt_decode Function Denial of Service Vulnerability (CVE-2015-8662) Affected Systems: FFmpeg Description: CVE (CAN) ID: CVE-2015-8662FFmpeg is a free software that allows you to perform video, transfer, and stream functions in

Linux malware analysis and learning skills Linux malware should be very small compared to windows, In the http://malwaredb.malekal.com/virus library site in dozens of hundreds of virus samples will appear in a linux sample. I will summarize and

Linux intrusion detection Basics In linux, there are five commands for auditing:Last: This command can be used to check the Successful Logon, shutdown, and restart of our system. This command is used to format the/var/log/wtmp file.Lastb: this

Schneider Electric Modicon M340 Buffer Overflow Vulnerability (CVE-2015-7937)Schneider Electric Modicon M340 Buffer Overflow Vulnerability (CVE-2015-7937) Release date:Updated on:Affected Systems: Schneider Electric Modicon PLC BMXPRA0100Schneider

IOS jailbreak device Trojan TinyV appears Claud Xiao, a security researcher at Palo Alto Networks, recently published an article about the analysis of the new Trojan "TinyV. Security company Palo Alto Networks found the trojan in OctoberPalo Alto

A giant network design defect cracking Weak Password It's not easy. Ask for a homepage and a high rank. We all know dudu.Dudu.ztgame.comThey are all broadcasters. In theory, they all have backend management. Find them.Google

A good loan website bypasses SQL Injection somewhere (with a verification script) RTDetailed description: Vulnerability address: http://www.haodai.com/zixun/k_1*/ * Injection exists. Space is filtered, comma, less than, greaterA delay occurs when

Rips Scanners (0.5) exposed local File Inclusion Vulnerability RIPS is a source code analysis tool written in php. It uses static analysis technology to automatically discover potential security vulnerabilities in PHP source code. Penetration

Webshell Security Detection (4)-traffic-based Webshell analysis example1. Typical operations After a full introduction to the previous articles, I think everyone has some knowledge about how to detect webshells. Today we will discuss how to detect

Mengniu Remote Code Execution Vulnerability obtain the highest privilege weak password of an Intranet Server Mengniu remote code execution vulnerability allows you to gain root privileges and roam the Intranet Http: // 222.74.204.53: 80/Weblogic

CHANGBA website has SQL Injection CHANGBA website has SQL Injection  POST /admin/admin_login.php?ac=login HTTP/1.1Host: 211.151.86.221:8898Content-Length: 45Cache-Control: max-age=0Accept:

China Tie Jian e-commerce platform getshell (root permission \ various bidding information) China Railway Construction's e-commerce platform, design various bidding and winning information ~ URL: http: // **. **: 8000/ China Railway

From weak passwords to Getshell Http://extplat.minanins.com/console/login/LoginForm.jsp Weblogic is used for one of the sites of the Civil Security Department, and the console is exposed Weak Password: webloigc weblogic123 The port jumps to 9

Use of htran and socks4-Intranet penetration In Intranet penetration, it is necessary to rebound the socks proxy. We all know that lcx is used to forward ports. It seems that few people directly connect to the proxy. Because we want to connect to

Introduction to serial data capture and serial communication simulation 0x00 Preface Most of the serial communication is fixed, so most attacks mainly involve capturing data and simulating communication. How to determine whether it is the easiest

Penetration skills-Some Opinions on safe dogs Security Attacks and defense are never outdated. Just like a website you infiltrate, you may not be able to penetrate it well at some point due to various technical conditions, but as you grow and study.