Apache ActiveMQ remote code execution vulnerability recurrence (CNVD-2023-69477)

Apache ActiveMQ remote code execution RCE vulnerability recurrence (CNVD-2023-69477) The vulnerability that was discovered last week is a good time to reproduce it and record it. 1. Vulnerability description ? A remote code execution vulnerability exists in Apache ActiveMQ. A remote attacker with access to the Apache ActiveMQ server TCP port (default is 61616) can […]

Describe in detail the execution process of js and the execution principle of javascript

Hello everyone, the editor is here to answer the following questions for you, explain in detail the execution process of js and the execution principle of javascript. Now let us take a look together! Foreword JavaScript The execution process is divided into two stages, the compilation stage and the execution stage. During the compilation phase, […]

Project3: Implemented execution transactions for multiple statements

Implemented execution transactions of multiple statements, such as GROUP BY, JOIN, TOP-N, INDEX-SCAN Mainly build the executor The processing model of a DBMS defines how the system executes query plans. There are different trade-offs for different workloads. Volcano model: Here is a detailed description of the volcano model: Operators and Operations: The Volcano model breaks […]

Mybatis special SQL execution

Article directory fuzzy query batch deletion Dynamically set table name Add function to obtain auto-incremented primary key Custom mapping resultMap resultMap handles the mapping relationship between fields and attributes Many-to-one mapping processing Processing mapping relationships in cascade mode Use association to handle mapping relationships Step by step query 1. Query employee information 2. Query department […]

HVV explosion vulnerability: latest WPS RCE (remote command execution) recurrence

The popular WPS command execution vulnerability recently exposed by HVV is actually not 0DAY. It appeared as early as 2019, but the EXP was only made public recently. Let’s reproduce it next. 0x00 affects version WPS Office 2023 Personal Edition < 11.1.0.15120 WPS Office 2019 Enterprise Edition < 11.8.2.12085 0x01 Environment Configuration wps version: WPS […]

A brief discussion on the registration and execution process of LINUX interrupts (2)

Interrupt initialization The reason why it is not called interrupt definition here is because the registration of the system’s interrupt processing function is still different from the registration of the user’s interrupt processing function. start_kernel init_IRQ irqchip_init of_irq_init Finally, the gic_of_init function is called in of_irq_init. This function is a function that initializes GIC-V3. It […]

The execution speed of Python’s Sync and Async

Preface The new version of Python supports the async/await syntax. Many articles say that the implementation code of this syntax will become very fast, but this speed is limited by scenarios. This article will try to briefly explain why Async‘s code is faster than Sync‘s code in some scenarios. 1. A simple example First, let’s […]

Execution flow control of shell in Linux

Table of Contents 1. for statement 1. Basic format of for statement 2. Example 2. Conditional statements 1. while…do statement 2. Until…do statement 3. if…then statement 4. Example 3. case statement 4. expect response statement 1. Fixed answer 2. Combine expect with the bash environment 3. Example 5. Termination statement 1. for statement Function: perform […]

Reproduction and simple exploitation of ibos4.5.5pro command execution vulnerability

Vulnerability description There is a command injection vulnerability in IBOS. This vulnerability originates from the command injection vulnerability in the database backup in the IBOS 4.5.4 Open version. An attacker could exploit this vulnerability to gain control of the server. Source code analysis Download the source code from the official website, and we use the […]