Ohu Government System /design/edittheme.php Code Execution Vulnerability

Ohuhu government system is the government portal system of Shanghai Ohuhu Network Technology Co. A code execution vulnerability exists in /design/edittheme.php. An attacker can exploit this vulnerability to execute arbitrary php code...

Ohu Government System/design/catid_user_save.php Code Execution Vulnerability

Ohuhu government system is the government portal system of Shanghai Ohuhu Network Technology Co. A code execution vulnerability exists in the Eurohoo government system/design/catidusersave.php. An attacker can exploit the vulnerability to execute arbitrary php code...

SQL Injection Vulnerability in Province_city1.php File of Ohu Government System

Ohuhu government system is the government portal system of Shanghai Ohuhu Network Technology Co. A SQL injection vulnerability exists in the provincecity1.php file of the Ohuhu government system. An attacker can exploit this vulnerability to execute arbitrary SQL statements and obtain sensitive...

Ohoo Government System ohocms_viewcode.php Arbitrary File Read Vulnerability

Ohuhu government system is the government portal system of Shanghai Ohuhu Network Technology Co. There is an arbitrary file read vulnerability in the ohocmsviewcode.php file of the Ohu government system. An attacker can exploit this vulnerability to read arbitrary files...

SQL Injection Vulnerability in jg_city.php File of Ohu Government System

Ohuhu government system is the government portal system of Shanghai Ohuhu Network Technology Co. A SQL injection vulnerability exists in the jgcity.php file of the Ohuhu government system. An attacker can exploit this vulnerability to execute arbitrary SQL statements and obtain sensitive...

SQL Injection Vulnerability in getjwj.php File of Ohu Government System

Ohuhu government system is the government portal system of Shanghai Ohuhu Network Technology Co. A SQL injection vulnerability exists in the getjwj.php file of the Ohuhu Government System. An attacker can exploit this vulnerability to execute arbitrary SQL statements and obtain sensitive...

Design_edittheme2.php Arbitrary File Write Vulnerability in Ohoo Government System

Ohuhu government system is the government portal system of Shanghai Ohuhu Network Technology Co. An arbitrary file write vulnerability exists in the designedittheme2.php file of the Ohuhu government system. This vulnerability allows attackers to write arbitrary files and gain server privileges...

SQL Injection Vulnerability in Province_city.php File of Ohu Government System

Ohuhu government system is the government portal system of Shanghai Ohuhu Network Technology Co. A SQL injection vulnerability exists in the provincecity.php file of the Ohuhu government system. An attacker can exploit this vulnerability to execute arbitrary SQL statements and obtain sensitive...

Eurohoo Government System set_border_color.php File Remote Command Execution Vulnerability

Ohuhu government system is the government portal system of Shanghai Ohuhu Network Technology Co. A remote code execution vulnerability exists in the setbordercolor.php file of the Ohuhu Government System due to improper filtering. An attacker can exploit this vulnerability to execute arbitrary ph...

Remote Code Execution Vulnerability in custom_design.php File of Ohuhu Government System

Ohuhu government system is the government portal system of Shanghai Ohuhu Network Technology Co. A remote code execution vulnerability exists in the customdesign.php file of the Ohuhu government system. An attacker can exploit this vulnerability to execute arbitrary php code...

base-donnees-publique.medicaments.gouv.fr XSS vulnerability

Vulnerable URL: http://base-donnees-publique.medicaments.gouv.fr/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

le.utah.gov XSS vulnerability

Vulnerable URL: http://le.utah.gov/asp/interim/commit.asp?Year=2015=HSTTRA%3C!%27/!%22/!%27/%22/--!%3E%3C/Title/%3C/script/%3E%3CInput/Autofocus/%0D/Onfocus=confirmXSSPOSED%20//%3E%3CSvg%3E=13585 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability...

jerseyvetlab.nj.gov XSS vulnerability

Vulnerable URL:...

Policy Experts Push To Make Vulnerability Equities Process Law

The U.S. government’s role in vulnerability disclosures is a vital part of our national security and should be codified in law, said a group of policy experts at a panel discussion last week at the RSA Conference. The panelists argued that the government’s current process of vulnerability use and...

Spear Phishing Techniques Used in Attacks Targeting the Mongolian Government

Introduction FireEye recently observed a sophisticated campaign targeting individuals within the Mongolian government. Targeted individuals that enabled macros in a malicious Microsoft Word document may have been infected with Poison Ivy, a popular remote access tool RAT that has been used for...

Spear Phishing Techniques Used in Attacks Targeting the Mongolian Government

Introduction FireEye recently observed a sophisticated campaign targeting individuals within the Mongolian government. Targeted individuals that enabled macros in a malicious Microsoft Word document may have been infected with Poison Ivy, a popular remote access tool RAT that has been used for...

btb.termiumplus.gc.ca XSS vulnerability

Vulnerable URL: http://www.btb.termiumplus.gc.ca/tpv2alpha/alpha-eng.html?lang=eng=1'"--!confirmOPENBUGBOUNTY//...

Data Stealing Malware TeamSpy Resurfaces in Spam Campaign

After almost a four-year respite, the data-stealing TeamSpy malware has resurfaced, or at least that’s what a spam campaign detected over the weekend suggests, researchers say. Researchers at the CrySyS Lab in Hungary originally identified the malware back in March 2013 when they traced it back t...

Schneier Brings Campaign for IoT Regulation to RSA

SAN FRANCISCO—Bruce Schneier on Tuesday called on technologists to get involved with policy, insisting that as the Internet of things continues to unfold, the knowledge security experts have will become more applicable. Schneier, CTO of IBM Resilient, stressed in a talk here at the RSA Conference...

New “Fileless Malware” Targets Banks and Organizations Spotted in the Wild

More than a hundred banks and financial institutions across the world have been infected with a dangerous sophisticated, memory-based malware that's almost undetectable, researchers warned. Newly published report by the Russian security firm Kaspersky Lab indicates that hackers are targeting bank...