3851 matches found
huzhu.gov.cn XSS vulnerability
Vulnerable URL: http://www.huzhu.gov.cn/HuaihiReadComplain.asp?ComplainID=1"...
ccgovernment.carr.org XSS vulnerability
Vulnerable URL: http://ccgovernment.carr.org/ccg/ccproc/submit.asp?amount=20=Recs%20and%20parks%20education%20coursesid=RP28412=1"...
dasapps.ohio.gov XSS vulnerability
Vulnerable URL: http://dasapps.ohio.gov/surplus/auto/Inventory.asp?InventNum=1"...
Websites Grabbing User-Form Data Before It's Submitted
Websites are sending information prematurely: ...we discovered NaviStone's code on sites run by Acurian, Quicken Loans, a continuing education center, a clothing store for plus-sized women, and a host of other retailers. Using Javascript, those sites were transmitting information from people as...
June 27, 2017 – Morning Cyber Coffee Headlines – “Helen Keller” Edition
Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! June 27, 2017 - Headlines 'Petya' ransomware attack strikes companies across...
yanji.gov.cn XSS vulnerability
Vulnerable URL: http://www.yanji.gov.cn/user/index.xhtml?menuid=236==705&cmd1;=content=/%27%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 15:12 GMT Vulnerability type:| XSS...
NIST Releases New Digital Identity Guidelines
The National Institute of Standards and Technology NIST has released the Digital Identity Guidelines document suite. The four-volume suite offers technical guidelines for organizations that use digital identity services. US-CERT encourages information security practitioners in industry, governmen...
Shaanxi Weibin District Government Service Center Approval Electronic Monitoring System has multiple loopholes
Shaanxi Weibin District Government Service Center Approval Electronic Monitoring System has multiple vulnerabilities Weak password in the background: also the initial password http://113.201.122.70:8080/Approval/System/Login.aspx...
On GhostHook, Fireball, WannaCry, and more
Mike Mimoso and Chris Brook discuss the news of the week, including Citizen Lab’s latest report, WannaCry hitting Honda, GhostHook, and Fireball. Download: ThreatpostNewsWrapJune232017.mp3 Music by Chris Gonsalves Show notes: GhostHook attack bypasses Windows 10 PatchGuard Say Goodbye to SMBv1 in...
Trump's Cybersecurity Executive Order Under Fire
NEW YORK–President Donald Trump’s Cybersecurity Executive Order needs an overhaul, specifically a shift from planning and proposals to the pragmatic. According to Ed Amoroso, former AT&T CSO, there are dire consequences to the U.S. critical infrastructure if the U.S. government pursues its curren...
Mexican Journalists, Lawyers Focus of Government Spyware
Dozens of Mexican journalists, lawyers, and even a child, had their devices infected with commercially produced spyware during the past two years as part of an overarching campaign believed to be carried out by the nation’s government. The spyware, Pegasus, came in the form of text messages...
karnataka.gov.in XSS vulnerability
Vulnerable URL: http://www.karnataka.gov.in/hfw/kannada/Pages/home.aspx?FollowSite=0=%27-confirm/OPENBUGBOUNTY/-%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8100 VIP website...
maine.gov XSS vulnerability
Vulnerable URL: https://www.maine.gov/maineosa/survey/question.php?graphtype=id=groupid=categoryid=%27%22%3E%3Csvg/onload=confirm%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 14:53 GMT Vulnerability type:| XSS...
Country micro CMS government website system interviews module exist SQL injection vulnerability
No description provided by source...
Country micro CMS government website system list_content SQL injection vulnerability
No description provided by source...
Country micro CMS government website system list_picture SQL injection vulnerability
No description provided by source...
Country micro CMS government website system list_ask SQL injection vulnerability
No description provided by source...
Country micro CMS government website system list of attachments exist SQL injection vulnerability
No description provided by source...
Huawei UMA Product Information Disclosure Vulnerability (CNVD-2017-12922)
Huawei Unified Maintenance Audit UMA is a unified IT core resource operation and maintenance management and security audit platform designed for carriers, government, finance, electric power and large enterprises. Huawei UMA products have information leakage vulnerabilities, which can be exploite...
Huawei UMA Product Information Disclosure Vulnerability (CNVD-2017-12923)
Huawei Unified Maintenance Audit UMA is a unified IT core resource operation and maintenance management and security audit platform designed for carriers, government, finance, electric power and large enterprises. Huawei UMA products have information leakage vulnerabilities, which can be exploite...