Cloud Security

Cacti host_new_graphs_save function SQL Injection Vulnerability (CVE-2015-8377)Cacti host_new_graphs_save function SQL Injection Vulnerability (CVE-2015-8377) Release date:Updated on:Affected Systems: Cacti Cacti Description: CVE (CAN) ID: CVE-2015

UC Browser: Thoughts on ZipInputStream Summary ZipInputStream is just as disappointing to those who don't know ZipInputStream Armageddon (Movie: The End of the World!   ZipInputStream's insecure processing of zip files directly results in the final

Introduction to the browser fuzz framework This article briefly introduces the principles and advantages and disadvantages of the three popular browser dynamic Fuzz tools cross_fuzz, grinder, and X-Fuzzer, it also provides a browser fuzz method that

Reflection Interaction Mechanism in Android open-source penetration testing framework Drozer I. Introduction Drozer is an open-source Android penetration testing framework developed by MWR Labs. It can interact with Android virtual machines through

OWASP's top 10 Web security problems are totally out of control in the JEE System Although Java ee has some excellent built-in security mechanisms, it cannot fully cope with various threats facing applications, especially many of the most common

Java deserialization vulnerability execution command echo implementation and Exploit download Some of the technologies and tools mentioned in this article may be offensive and only for safe learning and teaching purposes. Illegal use is prohibited! 0

High-risk OA vulnerability Repair Process On the 21st, the Deputy Director of the Information Security Department sent an email about the major security risks of OA. One was the issue of unauthorized access, and the other was the struts version, the

The same security vulnerability exists in AVG, McAfee, and Kaspersky software. Antivirus software of AVG, McAfee, and Kaspersky has the same security vulnerability. Anti-Virus Software creates a memory space with read/write execution permissions

Android Audio component information leakage Vulnerability (CVE-2015-6627)Android Audio component information leakage Vulnerability (CVE-2015-6627) Release date:Updated on:Affected Systems: Android Android 6.0 Description: CVE (CAN) ID: CVE-201

Android mediaserver Memory Corruption Vulnerability (CVE-2015-8506)Android mediaserver Memory Corruption Vulnerability (CVE-2015-8506) Release date:Updated on:Affected Systems: Android Android 6.0 Description: CVE (CAN) ID:

Android mediaserver Memory Corruption Vulnerability (CVE-2015-8505)Android mediaserver Memory Corruption Vulnerability (CVE-2015-8505) Release date:Updated on:Affected Systems: Android Description: CVE (CAN) ID: CVE-2015-8505Android is a

Adobe Flash Player and AIR Security Restriction Bypass Vulnerability (CVE-2015-7662)Adobe Flash Player and AIR Security Restriction Bypass Vulnerability (CVE-2015-7662) Release date:Updated on:Affected Systems: Adobe Flash Player Adobe Flash

Adobe ColdFusion XSS Vulnerability (CVE-2015-8053)Adobe ColdFusion XSS Vulnerability (CVE-2015-8053) Release date:Updated on:Affected Systems: Adobe ColdFusion 〈 11 Update 7Adobe ColdFusion 〈 10 Update 18 Description: CVE (CAN) ID:

Huawei eSpace CLI Module Denial-of-Service Vulnerability (CVE-2015-7845)Huawei eSpace CLI Module Denial-of-Service Vulnerability (CVE-2015-7845) Release date:Updated on:Affected Systems: Huawei eSpace U1981Huawei eSpace U1980Huawei eSpace

TCP handshake Spoofing This is a new attack method for our existing knowledge. Generally, the two ends of the TCP handshake are authenticated to each other's IP addresses. This attack tells us that this is not always true. In the cooperative

Bilibili Intranet roaming: redis obtains the root permission I pretended to listen to a port on VPS, and then suddenly rebounded to a shell. Well, I pretend I don't know which month a crontab backdoor brought me into Bilibili's intranet again.There

AD Alliance turned into Trojan Alliance HackingTeam vulnerability weapons attacked millions of netizens 0x00 In early November, the 360 Internet Security Center monitored a spike in the interception volume of a downloading trojan named

SQL Injection for a website (a large number of Personal Data leaks \ free-of-charge items \ arbitrary item modification) SQL injection can expose a large number of members to submit their personal information and administrative staff to improve

Siteserver cms uses webshell in the backgroundTarget Site: http://www.xxxxx.gov.cn Default background address: http://www.xxxx.gov.cn/siteserver/login.aspx login into the background to see: see the upper left corner, I suddenly went to Baidu ha this

Attackers can execute arbitrary SQL statements by bypassing the latest website security dog (IIS) protection rules. Attackers can execute arbitrary SQL statements by bypassing protection rules...Detailed description: There are still many websites