financekpp.gov.pk XSS vulnerability

Vulnerable URL:...

SQL Injection Vulnerability in DeptId Parameter of Wave Software Administrative Services System

The Administrative Service System ASS is a comprehensive administrative service system that integrates information and consultation, approval and charging, management and coordination, and complaints and supervision. A SQL injection vulnerability exists in the DeptId parameter of the administrati...

Feds Change Policy to Require Warrant for Use of Stingrays

The Department of Justice has established a new policy that requires federal law enforcement agents–and state and local agencies working with the department–to obtain search warrants in order to use Stingray devices. The change is a major one, as agents will now need to show probable cause before...

Two Arrested For Dropping Drugs And Porn Into Prison Using A Drone

The use of Unmanned Aerial Vehicles UAVs, popularly known as Drones, is rapidly transforming the way crimes are conducted, and this story helps prove this right. Maryland State Police arrested two men – Thaddeus Shortz and Keith Brian Russell – suspected of allegedly trying to smuggle drugs and...

scaramozzino.be XSS vulnerability

Vulnerable URL: http://www.scaramozzino.be/?p=Contact=Immobilier= Details: Description| Value ---|--- Patched:| Yes, at 01.10.2015 Latest check for patch:| 01.10.2015 08:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank|...

Threat Outbreak Alert RuleID17227: Email Messages Distributing Malicious Software on August 10, 2015

Medium Alert ID: 40361 First Published: 2015 August 10 14:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17227 may contain the following files: Name |...

'Prohibition Era' Of Security Research May Be Ahead

LAS VEGAS–Export controls have become a dirty phrase in the security community, especially among researchers, pen testers, and others who rely on vulnerability information and exploits to do their jobs. And if the Wassenaar Arrangement rules proposed by the United States aren’t modified...

DHS Raises Privacy Concerns With Senate Cyber Threat Sharing Bill

A major information-sharing bill that’s in the Senate right now would allow private organizations to share threat data with any government agency, something that the Department of Homeland Security says could have severe privacy implications and cause confusion and inefficiencies inside the feder...

Government Takes Second Look at US Wassenaar Rules

In spite of self-congratulatory pats on the back from several corners of the security world, this week’s decision from the Commerce Department’s Bureau of Industry and Security BIS to rewrite the proposed U.S. implementation of the Wassenaar Arrangement rules was an expected outcome—albeit an...

Stakeholders Argue Against Restrictive Wassennaar Proposal

The commenting period regarding the Wassenaar Arrangement expired on Monday but the echo chamber around the largely maligned proposal continues to reverberate. Several stakeholders implicated in the proposal added their voices to that chamber on Friday morning, urging the government to revise...

Google Calls Proposed U.S. Wassenaar Rules 'Not Feasible'

As the clock winds down on the comment period for the United States government’s proposed implementation of the Wassenaar Arrangement export controls for intrusion software, Google officials say that the rules would have a “significant negative impact” on security research. The Department of...

Coalition of Security Companies Forms to Oppose Wassenaar Rules

A large group of security companies have formed a coalition to oppose the proposed rules from the Department of Commerce that would regulate the export of so-called intrusion software, a broad term that researchers and legal experts are concerned would limit security research and development. The...

Wekby APT 18 Exploiting Hacking Team Flash Zero Day

The Wekby APT group, implicated in a number of targeted attacks against health care organizations such as Community Health Systems and major pharmaceutical companies, is reportedly making use of the Adobe Flash Player zero-day found in the Hacking Team data dump. According to Virginia-based...

Threat Outbreak Alert RuleID16387: Email Messages Distributing Malicious Software on July 2, 2015

Medium Alert ID: 39639 First Published: 2015 July 6 13:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16387 may contain the following files: Name | Size...

Creator of Blackshades Malware Jailed 4 Years in New York

A Swedish man who was the mastermind behind the $40 BlackShades Remote Access Tool RAT that infected over half a million systems around the world was sentenced to almost five years in a U.S. prison on Tuesday. Alex Yücel, 25, owned and operated an organization called "BlackShades" that sold a...

Is China Behind the Massive Data Theft of 4 Million U.S. Officials?

The US federal agency has notified its 4 Million current and former government employees that their private data has been compromised in a massive data breach. Hackers managed to break into US government computer systems in the Office of Personnel Management OPM and steal records of Millions of...

New Snowden Documents Outline Govt. Memos on Expanded Spying

A new set of memos uncovered by Edward Snowden and shared with the New York Times and ProPublica this week reveal how the Obama administration narrowed its search for hackers and expanded its warrantless surveillance program. The two memos, which date back to May and July 2012, enabled the Nation...

Proposed U.S. Wassenaar Rules on Intrusion Software

Two things worth noting from yesterday’s unveiling of the Bureau of Industry and Security’s proposed Wassenaar rules for the U.S. that weren’t so overt: a The U.S. generally leads the way in implementing Wassenaar changes, and this time it’s been beaten by the EU by almost 18 months; and b reques...

KCodes NetUSB Vulnerability Details Surface

The Department of Homeland Security-sponsored CERT at Carnegie Mellon University today issued an alert warning of a serious vulnerability in KCode NetUSB, which is integrated into products sold by a number of networking vendors. KCodes NetUSB is a Linux kernel module that enables several users on...

Appeals Court Rules NSA Metadata Collection Not Authorized by Section 215

The United States Court of Appeals for the Second Circuit ruled Thursday that the Patriot Act does not authorize the bulk collection of phone records by the NSA. The ruling undermines the key foundation upon which the federal government’s phone metadata surveillance program is built, Section 215 ...