Cloud Security

Samba File Sharing Service Remote Command Execution Vulnerability (CVE-2015-0240)   The violent CVE-2015-0240 security vulnerability occurs in the smbd daemon, which can be exploited by malicious samba clients. attackers send a specially crafted

Ao you Browser Remote Command Execution Vulnerability Ao you browser has been updated to 4.4.900. Download the latest version and find that the XSS that adds the home page to the configuration center has been fixed. However, you can find two more

Cross-Domain command execution (QQ, browser, email, etc.) is caused by xss stored in the whole system of IOS) The last edit was tested and found that the ios version existed a long time ago. It may have been in existence for many years. It can

Detailed configuration of OSSEC reinforced linux System OSSEC is an open-source host-based intrusion detection system that performs log analysis, file integrity check, policy monitoring, rootkit detection, real-time alarms and positive responses. It

SMB packet capture cracking windows login passwordI personally feel that several desktop security vendors in China pay more attention to the traditional AV Technology. I think they should expand their defense depth and open up network intrusion

How to Set tomcat securitySecurity reinforcement: Tomcat is the hardest hit area. So we sorted out Tomcat security reinforcement. 1. upgrade to the latest stable version. Currently, Tomcat supports versions 6.0 and 7.0. 1) For stability

SF app verifies user vulnerabilities and obtains coupons and solutions for others in batches. The SF Express app did not verify the account currently logged in when querying SF coupons, so that you can view SF coupons under other accounts. $nn=800008

How to obtain the plaintext password of the IIS application pool account Sometimes, in order to obtain the necessary permissions, we will set a local or domain account for the identity of the IIS application pool to run. For example, SharePoint

Binary vulnerability Mining0X00 preface: Binary vulnerability research can be divided into vulnerability analysis and exploitation and vulnerability mining. A large number of articles can be found on the Internet used for vulnerability analysis, but

Libmspack 'mspack/chmd. c' Memory Corruption Vulnerability Release date:Updated on: Affected Systems:LibmspackDescription:Bugtraq id: 72490 Libmspack is a library of loose Microsoft compression formats such as CAB, CHM, HLP, kernel, KWAJ, and

Linux Kernel 'sk _ dst_get () 'DoS Vulnerability Release date:Updated on: Affected Systems:Linux kernelDescription:Bugtraq id: 72435 Linux Kernel is the Kernel of the Linux operating system. Linux Kernel has a denial of service vulnerability in

Xen Denial of Service Vulnerability (CVE-2015-0268) Release date:Updated on: Affected Systems:XenSource Xen> = 4.5Description:Bugtraq id: 72591CVE (CAN) ID: CVE-2015-0268 Xen is an open-source Virtual Machine monitor developed by the University of

Alimama's API design error causes the master site to upload arbitrary files 1. Capture and upload the Avatar address on the client.  2. If you want to upload any file, you just need to modify the file name and the internal token. Here, you only

CVE-2015-2080 Analysis Jetty is a widely used java container. When developing java Web applications, jetty is used as an embedded container, which is very convenient for debugging. Many large Internet companies use it to replace tomcat. As far as I

Baozou comics # improper Csrf defense: attackers can exploit this vulnerability to modify others' mailboxes and reset their passwords.   First, modify the email address and capture packets in the email address verification area. At this time, my

Damai.cn waf bypass (three injection points are given to the deputy account) Injection: http://news.damai.cn/FrontNewsAdmin/NewsContentAction.do? LabelName = injection parameter & newsId = 272 & number = 4 & _ action = getRelatedNews Regular

China Mobile's school news, people-to-people, And Getshell contain more than 20 database information China Mobile Communications Group Co., Ltd. is a subsidiary of China Mobile Communications Group. The Getshell website allows hackers to connect to

Zhcms v1.0 SQL injection + Arbitrary Code Execution I. background login bypass caused by SQL Injection Check UserAction. class. php to process the Login method in the code. Public function login () {if (! Empty ($ _ POST ['code']) {if ((! Empty ($ _

Touniu order insurance price tampering Touniu order, price can be tamperedHttp://www.tuniu.com/who will choose a travel route, then select the corresponding package, submit the order, do not pay. At this time, go to the background to view the

Suning Tesco has multiple super administrator weak passwords in the background of a system (the verification code can be reused) Suning Tesco has multiple super administrator weak passwords in the background of a system (the verification code can be