tramites.chaco.gov.ar XSS vulnerability

Open Bug Bounty ID: OBB-599541 Description| Value ---|--- Affected Website:| tramites.chaco.gov.ar Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Ongoing Threat of Ransomware

NCCIC has observed an increase in ransomware attacks across the world. Ransomware is a type of malicious software, or malware, designed to deny access to a computer system or data until a ransom is paid. Ransomware typically spreads through phishing emails or by unknowingly visiting an infected...

US government seizes classified advertising website Backpage

By Waqas Backpage was once the second largest classified advertising site after This is a post from HackRead.com Read the original post: US government seizes classified advertising website Backpage...

Subverting Backdoored Encryption

This is a really interesting research result. This paper proves that two parties can create a secure communications channel using a communications system with a backdoor. It's a theoretical result, so it doesn't talk about how easy that channel is to create. And the assumptions on the adversary a...

Google Bans Cryptocurrency Mining Extensions From Chrome Web Store

In an effort to prevent cryptojacking by extensions that maliciously mine digital currencies without users' awareness, Google has implemented a new Web Store policy that bans any Chrome extension submitted to the Web Store that mines cryptocurrency. Over the past few months, we have seen a sudden...

U.S. DoD Hopes To Stamp Out Threats With Bug Bounty Program

The U.S. Department of Defense is doubling down on routing out vulnerabilities in its massive government systems. On Monday, the DoD announced it was expanding its bug bounty program to include the agency’s massive Defense Travel System. The “Hack the DTS” program launched in partnership with bug...

bangladesh.gov.bd Open Redirect vulnerability

Open Bug Bounty ID: OBB-594829 Description| Value ---|--- Affected Website:| bangladesh.gov.bd Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

CVE-2018-1038

creationtimestamp| type| source ---|---|--- 2018-03-30 07:51:56+00:00| exploited| https://t.me/informationsecuritychannel/15581 2018-03-30 13:50:28+00:00| seen| https://t.me/canyoupwnme/3487 2018-04-11 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=281 2018-04-23...

Arbitrary File Read Vulnerability in PowerEasy SmartGov

PowerEasy government website management system PowerEasy SmartGov is a complete set of government portal application solutions provided by PowerEasy according to the actual application requirements of the government. An arbitrary file read vulnerability exists in PowerEasy SmartGov. An attacker c...

North Korean Malicious Cyber Activity

The Department of Homeland Security DHS and the Federal Bureau of Investigation FBI have identified Trojan malware variants—referred to as SHARPKNOT—used by the North Korean government. The U.S. Government refers to malicious cyber activity by the North Korean government as HIDDEN COBRA...

bdlaws.minlaw.gov.bd XSS vulnerability

Open Bug Bounty ID: OBB-592615 Description| Value ---|--- Affected Website:| bdlaws.minlaw.gov.bd Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

US government gets its hand on $15,000 iPhone cracking device

By Waqas Until a couple of weeks ago, Cellebrite was one of the This is a post from HackRead.com Read the original post: US government gets its hand on $15,000 iPhone cracking device...

volunteer.dc.gov XSS vulnerability

Open Bug Bounty ID: OBB-591992 Description| Value ---|--- Affected Website:| volunteer.dc.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

FBI: Iranian Firm Stole Data In Massive Spear Phishing Campaign

The United States Department of Justice announced charges against nine Iranians accused of stealing private data from U.S. universities, private companies and U.S. government agencies. FBI Deputy Director David Bowdich said in a statement that the state-sponsored hackers worked for more than four...

library.safework.sa.gov.au XSS vulnerability

Open Bug Bounty ID: OBB-582941 Description| Value ---|--- Affected Website:| library.safework.sa.gov.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

myid.pahang.gov.my XSS vulnerability

Open Bug Bounty ID: OBB-580134 Description| Value ---|--- Affected Website:| myid.pahang.gov.my Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

China-Linked APT15 Used Myriad of New Tools To Hack UK Government Contractor

CANCUN, Mexico – Researchers at NCC Group have discovered multiple backdoors on a UK government contractor’s computer systems designed to steal sensitive government and military data. The hack is tied to China-linked cyber espionage group APT15, which researchers said is utilizing many new tools ...

DFARS 7012 Compliance

At Coalfire, we field a lot of questions from government contractors about compliance with National Institute of Science and Technology NIST Special Publication SP 800-171. We also address requests for help with "DFARS 7012," which is a commonly used shorthand for Defense Acquisition Regulation...

Week in security (February 26 – March 4)

Last week on Malwarebytes Labs, we explained how to protect your computer from malicious cryptomining, we gave an encryption 101 lesson using ShiOne ransomware as a case study, and we offered an explanation about SQL injection. We also released a report on the state of malicious cryptomining from...

Injection Vulnerability in Guomicro CMS Government Website System v20180121 Member Registration

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. State Micro CMS government website system v20180121 injection vulnerability exists in the member registration , attackers can use the...