Lucene search
+L

3851 matches found

seebug.org
seebug.org
added 2016/06/18 12:0 a.m.15 views

Farmers-government system Item6. aspx parameter id SQL injection vulnerability

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2016/06/18 12:0 a.m.18 views

The wave of government approval platform ECGAP /channel/QueryHig. aspx file AppBusinessName parameter SQL injection vulnerability

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2016/06/16 12:0 a.m.11 views

Farmers-government system /ckq/nlview. aspx parameter CountryName SQL injection vulnerability

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2016/06/16 12:0 a.m.12 views

Even the Federal government system newlist2. aspx parameters columntitle SQL injection vulnerability

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2016/06/15 12:0 a.m.36 views

Shanghai Zhuo fan cms government service center/index/downLoadFile. action download vulnerability

http://xxx.com/index/downLoadFile.action?fileName=web.xml&filePath=WEB-INF/web.xml...

7.1AI score
SaveExploits0
ThreatPost
ThreatPost
added 2016/06/14 3:6 p.m.21 views

DNC Hacked, Research on Trump Stolen

Two separate APT groups believed to have ties to the Russian government have been fingered in attacks against the Democratic National Committee resulting in the theft of research done by the DNC on presumptive Republican nominee Donald Trump. Researchers at Crowdstrike, called in to investigate b...

1.5AI score
SaveExploits0References4
The Hacker News
The Hacker News
added 2016/06/14 6:55 a.m.9 views

Hack the Pentagon: Hackers find over 100 Bugs in U.S. Defense Systems

The "Hack the Pentagon" bug bounty program by the United States Department of Defense DoD has been successful with more than 100 vulnerabilities uncovered by white hat hackers in Pentagon infrastructure. In March, the Defense Department launched what it calls "the first cyber Bug Bounty Program i...

7AI score
SaveExploits0
seebug.org
seebug.org
added 2016/06/10 12:0 a.m.28 views

Farmers-government system /ExtWebModels/WebManage/ProductList. aspx POST parameters PName SQL injection vulnerability

No description provided by source...

7.1AI score
SaveExploits0
FireEye
FireEye
added 2016/06/03 1:30 a.m.388 views

APT Group Sends Spear Phishing Emails to Indian Government Officials

Introduction On May 18, 2016, FireEye Labs observed a suspected Pakistan-based APT group sending spear phishing emails to Indian government officials. This threat actor has been active for several years and conducting suspected intelligence collection operations against South Asian political and...

9.3CVSS0.2AI score0.9997EPSS
SaveExploits12
FireEye
FireEye
added 2016/06/03 1:30 a.m.432 views

APT Group Sends Spear Phishing Emails to Indian Government Officials

Introduction On May 18, 2016, FireEye Labs observed a suspected Pakistan-based APT group sending spear phishing emails to Indian government officials. This threat actor has been active for several years and conducting suspected intelligence collection operations against South Asian political and...

9.3CVSS7.7AI score0.9997EPSS
SaveExploits12
myhack58
myhack58
added 2016/05/27 12:0 a.m.20 views

From Australia driving license, steal the user's identity information-vulnerability warning-the black bar safety net

It is understood that the criminals may be from the Australia driver license in stealing the user's identity information, and the relevant authorities aware of this situation after, and not re-distribute new driver's license number, so that the victims for many years are affected by this problem...

0.2AI score
SaveExploits0
seebug.org
seebug.org
added 2016/05/26 12:0 a.m.18 views

南京擎天政务系统 /webpages/theme_service_list_page.aspx POST型sql注入

No description provided by source...

7.1AI score
SaveExploits0
ThreatPost
ThreatPost
added 2016/05/25 12:58 p.m.68 views

APT Groups Exploiting Patch Microsoft Office Flaw CVE-2015-2545

A Microsoft Office vulnerability patched six months ago continues to be a valuable tool for APT gangs operating primarily in Southeast Asia and the Far East. Researchers at Kaspersky Lab today published a report describing how attackers continue to flourish exploiting CVE-2015-2545, a remote code...

9.3CVSS0.7AI score0.80467EPSS
SaveExploits39References7
CNVD
CNVD
added 2016/05/23 12:0 a.m.5 views

Struts2 Command Execution Vulnerability in Government Network System

The Government Web System is a set of software designed to provide website building services for the government. A struts2 command-and-execute vulnerability exists in the GovWeb system, which can be exploited by an attacker to gain control of the website...

7AI score
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2016/05/22 3:29 a.m.10 views

webmail.jpj.gov.my XSS vulnerability

Open Bug Bounty ID: OBB-155058 Description| Value ---|--- Affected Website:| webmail.jpj.gov.my Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

6.4AI score
SaveExploits0
myhack58
myhack58
added 2016/05/11 12:0 a.m.26 views

3 6 0 Marvel Team virtualization vulnerabilities the fifth bomb: CVE-2 0 1 6-3 7 1 0 Dark Portal vulnerability analysis-vulnerability warning-the black bar safety net

From 2 0 1 5 year 5 month venom vulnerabilities raging global Cloud Platform, 3 6 0 Marvel Team accumulated in kvm, xen, vmware platform on found submitted up to 2 2 pieces of high-risk security 0day vulnerabilities, these vulnerabilities will lead to a General purpose cloud system was hacked...

8.1AI score0.00916EPSS
SaveExploits0
ThreatPost
ThreatPost
added 2016/05/10 12:5 p.m.12 views

FCC, FTC Investigate Mobile Security Update Practices

The glowing lack of public, real-world Stagefright exploits didn’t stop the U.S. government from using last summer’s blockbuster Android vulnerability as an illustration of the dangers facing mobile device users. Under the context of Stagefright exposing up to 1 billion devices to attack, the...

0.1AI score
SaveExploits0References6
ThreatPost
ThreatPost
added 2016/05/10 7:0 a.m.12 views

Yahoo Releases Second Wave Unsealed FISA Documents

Yahoo officially released part two of its once-secret government documents that were part of its 2007 court battle with the Foreign Intelligence Surveillance Court FISC that forced it to reveal sensitive customer data requested by the National Security Agency. This second wave of documents brings...

7AI score
SaveExploits0References7
The Hacker News
The Hacker News
added 2016/05/10 5:23 a.m.8 views

Top 4 Data Breaches reported in last 24 Hours

There is no doubt that data breaches are on the rise. Hardly a day goes without headlines about any significant data breach. According to the latest ‘Cyber Security Breaches Survey 2016’ report published by UK government, two-thirds of the biggest firm in the UK have experienced at least a cyber...

6.5AI score
SaveExploits0
myhack58
myhack58
added 2016/05/10 12:0 a.m.15 views

About Apache Struts 2 S2-0 3 2 vulnerability threat monitoring and emergency disposal of the case Bulletin-vulnerability warning-the black bar safety net

4 the end of the month, the Apache struts2 S2-0 3 2 remote code execution vulnerability CNVD-2 0 1 6-0 2 5 0 6, The CVE-2 0 1 6-3 0 8 1, hereinafter referred to as S2-0 3 2 vulnerability, the exploit code is disclosed and in a short time spread rapidly. CNVD Secretariat-National Internet emergenc...

8.5AI score
SaveExploits0
Rows per page
Query Builder