Cloud Security

Android Hacking Part 7: Attacking WebView This series has introduced a variety of methods to identify and attack Android Application vulnerabilities. In the previous issue, we introduced Android app debugging. In this issue, we will take a look at

Built-in browser cross-origin Scripting Vulnerability The built-in browser cross-origin Script Execution Vulnerability imposes no strict restrictions on the script execution, resulting in cross-origin script execution being tested using Android 4.0.3

BrigeOS cell bandwidth OA System Vulnerabilities   This platform has a log viewing network monitoring function. The default password of port 8080 admin can also be used to create Id_user bypass verification using the following method.  I will not

Baidu Browser Remote Command Execution 3 and Solution When the browser is updated, it is updated to the latest version (6.5.0.50449). After reading this article, a certain API has made some restrictions, but after studying it, I found that the

360 browser man-in-the-middle vulnerabilities can be exploited by more people After reading the recent iCloud man-in-the-middle attack, we found that the SSL man-in-the-middle attack on 360 security and speed browsers can be used more. After reading

An SQL injection vulnerability exists in a Hisense system. An SQL injection vulnerability exists in a Hisense system.Http://sup.hisense-plaza.com/scmsup/default0.aspx Hisense Supply Chain Management SystemTwo tb_UserCode and tb_Exml parameters at

Summary of PHP file inclusion Vulnerabilities0x00 preface the PHP file inclusion vulnerability is caused by the fact that when a file is introduced through a PHP function, the file name passed in has not been properly verified, thus operating the

74cms (20141027) multiple secondary injections   1. User/company/company_ajax.phpelseif ($ act = "promotion_add_save ") {*********************** report_deal ($ uid, 2, $ points ); $ user_points = get_user_points ($ uid); write_memberslog ($ uid, 1,9

Dongfeng yueda Kia main site SQL Injection Dongfeng yueda Kia master station SQL injection, multi-database, detachable Main Site: http://www.dyk.com.cn/promotion/index? Type = 89    Current Database dyk_dyk: Database: dyk_dyk[32 tables]+-----------

Problems caused by exposure of new APP background (leakage of user coordinates and other information) The new APP background is exposed .... Various .... This APP is wow.Background address: http://wasai.yy.com/admin/

Mango cloud KODExlporer Information Leakage + arbitrary command execution getshell (1) First, a piece of information is exposed, and your absolute path is leaked... I also read files one by one. In controller \ app. class. php  public function index(

Select 10 features that should be paid attention to in the Web application scan Solution The Web application scanner communicates with Web applications through the Web Front-end. It can automatically check Web applications, detect and analyze their

How to build a reliable WAF Previously I wrote a WAF Defense Capability Evaluation and tool, which is taken into consideration from the perspective of security O & M personnel choosing WAF products (prior to the test is considered as an

Dress assistant XSS vulnerability successfully wins background (affects more than 2200 million users) A feedback is submitted through the mobile APP and successfully enters the background.   Official Website  Cookies are stolen through XSS. 

Password Reset Vulnerability for any user on qihong Network Qihong net is an official website of the Securities Market weekly market journal. Founded in 1992, qihong net is China's first-class financial information provider and a leading financial

All versions of ThinkOX kill 0-day Affected Versions:ThinkOX full-version kill (the onethink and thinkphp frameworks may be affected, and you are too lazy to do so. Who is interested in your own analysis .)Vulnerability description:Illegal content

Server guard CMS global XSS Filter Bypass storage-type XSS front-end and back-end 74cms_v3.5.20.20151120Server guard CMS global XSS filtering bypasses the storage-type XSS frontend and backend (most of which can be input ). The strip_tags ()

Discuz! Command Execution for two versions of foreground Products Affected Version: Discuz! 6. x/7.x global variable protection Bypass Vulnerability The Internet has been relatively public, see:

Introduction to Internet security protection for e-commerce websitesSecurity Protection for e-commerce websites and the Internet is very important, especially when it comes to payment. This article summarizes some common web security defense

SQL blind injection and solutions for a mall in jiuyou For large game websites, injection is very harmful. For example, I inserted a data item in the item to increase the game gold coins. Sell gold coins to local tyrants at a low price. Affected