Cve-2017-10271 Vulnerability recurrence and analysis
The WLS Security component of Weblogic provides WebService externally. XMLDecoder is used to parse XML data passed in by users. Deserialization vulnerability occurs during parsing,...
Read More
Tag: security
SQL Injection test platform SQLol -6.CHALLENGES
February 7, 2024
by Roy Hughes
No Comments
SQLol challenges have 14 levels in total, and we are going to break them one by one. Challenge 0 aims to have the query return...
Read More
CVE Vulnerability – PHPCMS2008 /type.php Code injection high-risk vulnerability warning
February 7, 2024
by Biju Acharya
No Comments
Abstract: On November 4th, Ali Cloud security captured PHPCMS 2008 version /type. PHP remote GetShell 0day exploit attack for the first time, attackers can use...
Read More
Detailed analysis of Microsoft “Photos” application image encoder vulnerability (CVE-2020-17113)
February 7, 2024
by 袁惠如
No Comments
In the last article "Technical Analysis of Microsoft" Photo "application Raw format image encoder Vulnerability (CVE-2021-24091)", the author based on the superficial understanding of Olympus...
Read More
A TMD company iOS senior engineer interview memories
February 7, 2024
by Timothy Roberts-Hayes
No Comments
Off-topic: this kind of problem is best to find their own questions to talk about, not much, in advance to prepare a project you are...
Read More
We didn’t know for 10 years! WinRAR security flaw threatens 500 million users
February 7, 2024
by Nichole Pope MD
No Comments
Security firm Check Point has uncovered a major security flaw in WinRAR, a popular tool, that has existed since at least 2005, allowing hackers to...
Read More
Recurrence and summary of security loopholes
February 7, 2024
by Yasmin Tiwari
No Comments
Nginx engine X (Nginx) is a high-performance HTTP and reverse proxy Web server that provides IMAP, POP3, and SMTP services. It distributes the source code...
Read More
[CVE-2020-1948] Apache Dubbo Deserialization Vulnerability Analysis
February 7, 2024
by Melissa Proctor
No Comments
Dubbo is a high-performance, lightweight, open source Java RPC framework that provides three core capabilities: interface-oriented remote method invocation, intelligent fault tolerance and load balancing,...
Read More
Another vulnerability recurrence and analysis
February 7, 2024
by Badal Kashyap
No Comments
The WLS Security component of Weblogic provides WebService externally. XMLDecoder is used to parse XML data passed in by users. Deserialization vulnerability occurs during parsing,...
Read More
Quick BI introduction to real-time online analysis of massive Data
February 7, 2024
by 張心怡
No Comments
Quick BI is a flexible and lightweight self-service BI tool service platform based on cloud computing. Quick BI supports a wide variety of data sources,...
Read More
DES series encryption technology (2)
February 7, 2024
by Navya Sastry
No Comments
We in the last article "detailed analysis of DES series of encryption technology (a)" mentioned that DES was cracked in January 1999, and there are...
Read More
Blockchain accounting principle
February 7, 2024
by Maria Harvey
No Comments
Blockchain (1.0) is a cryptographic-based distributed ledger that is easily verifiable and immutable. It is generally believed that the blockchain combined with smart contracts is...
Read More
A must for newcomers! About the difference between DOM XSS and reflective XSS
February 7, 2024
by 喬彥廷
No Comments
Introduction The principle of XSS vulnerability is actually very simple, and it can be divided into three types: reflection type, storage type and DOM type....
Read More
What happens after you make a pointer free twice?
February 7, 2024
by 余佳蓉
No Comments
We all know a common knowledge when we start c language: dynamic memory application through malloc() needs to be freed through free() after use; So...
Read More
What is HTTP protocol
February 7, 2024
by Neil Evans
No Comments
Preface The network is composed of a number of nodes and links connecting these nodes, and then the network between the network into a huge...
Read More
Graphic hacker DNS attack
February 7, 2024
by Stacey Jones
No Comments
Local modify the Host file redirection path to the specified address. Spoofing attacks on DNS queries of users On the same LAN, spoofing attacks on...
Read More
Php-fpm (CVE-2019-11043) vulnerability reappears
February 6, 2024
by 司懿
No Comments
Security researcher Andrew Danau of Wallarm sent % 0A (newline character) to the server during the Real World CTF held from September 14 to 16,...
Read More
Remote code execution vulnerability recurrence analysis
February 6, 2024
by Kimberly Houston
No Comments
A recent article revealed a remote code execution vulnerability in the open source Project Spring Cloud Gateway, numbered CVE-2022-22947. Affected versions according to VMWare and...
Read More
All these years, we’ve been chasing the exploit artifact
February 6, 2024
by Deborah Smith
No Comments
Now, what we might think of as a great exploit tool, will it look like ten years from now? Probably something like what we now...
Read More
Cve-2022-22965 vulnerability analysis
February 6, 2024
by Martyn Williams
No Comments
The BeanWrapperImpl called by Spring when parameter binding is performed triggers this vulnerability when performing JavaBean operations.
Read More
Strtus2-048 Code Analysis debugging -(CVE-2017-9791)
February 6, 2024
by Samar Ramesh
No Comments
ActionMessage front-end display the customers, causing them to enter the getText function, the last message is treated as ognl expressions to perform so access/integration/saveGangster action...
Read More
Burp Suite blasts SQLi-Labs’ Less-5
February 6, 2024
by Christopher White
No Comments
1. Use proxy to capture packets, as shown in the following figure: 2. Right mouse button and send it to Intruder as shown below: Select...
Read More
Deserialization in ThinkPHP5 is analyzed in detail using chains
February 6, 2024
by 方淑慧
No Comments
As a Web dish chicken, I participated in the Red Hat Cup with my teachers before, but there was only 0 output. At that time,...
Read More
Fingerprint password authentication in ios
February 6, 2024
by Kathleen Malone
No Comments
After iPhone5s, iPhone hardware has supported the function of fingerprint recognition. Accordingly, some new APIS can also be applied to APP for user security verification....
Read More
8. Property related parameters
February 6, 2024
by Miss Anne Moore
No Comments
1, copy, use the type: nsstrings, block2, assign the use of type: delegate, int, float, NSInteger, bool, enumeration, struct... Retain use type: NSArra
Read More
Bug sweep (iOS related summary)2017 11 02 update
February 6, 2024
by James Knight-Boon
No Comments
As a result of oneself likelihood recently memory began to drop, want pertinence to take a bit of measure so! I hope I won't commit...
Read More
Application practice of differential privacy technology in Volcano Engine
February 6, 2024
by Ms. Jacqueline Scott DVM
No Comments
For the majority of Internet manufacturers, it has become an important work to develop high-quality privacy protection services to solve the problem of user privacy...
Read More
Click hijacking, XSS, CSRF for Web security
February 6, 2024
by Tia Moore
No Comments
Clickjacking represents a "Clickjacking" attack that allows a malicious page to click on a "victim site" in the user's name. After users log in to...
Read More
Principle of CAS for concurrent programming
February 6, 2024
by Ms. Jennifer Byrne
No Comments
If synchronized is not added, multi-thread modification of a value will lead to incorrect results and thread-safety problems. But locking is a performance-consuming operation. Whether...
Read More
Metasploit:MS10-061: Intrusion, Claim and forensics
February 6, 2024
by Jason Ryan
No Comments
Metasploit Framework is an open source penetration tool. The Metasploit Penetration Testing Framework has the largest public database of test vulnerabilities in the world. In...
Read More