3851 matches found
dairy.maharashtra.gov.in XSS vulnerability
Vulnerable URL: http://dairy.maharashtra.gov.in/index.php?option=comcontent=article=13=%27%22%3E%3E%3C/title%3E%27%22%3ESCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28/XSSPOSED/%29%3C/SCRIPT%3E〈=en Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:5...
Yahoo Transparency Report Shows Requests for Data Up
Yahoo this week published its transparency report for the first six months of the year and the numbers indicate that government requests for data on its users are up slightly after sharp dropoff for the report covering the last six months of 2014. Yahoo said that it received 5,221 government data...
5.6 Million Fingerprints Stolen In OPM Hack
It turns out roughly 5.6 million federal employees may have had their fingerprints stolen as part of this year’s mammoth Office of Personnel Management breach – a figure five times what the agency initially announced in June. OPM press secretary Sam Schumach broke the bad news Wednesday morning,...
2 0 1 5 year 8 on data security vulnerability analysis report-vulnerability warning-the black bar safety net
! Anwar gold and database attack and Defense laboratory DBSec Labs in months, the high-risk vulnerability summary form analysis report, share of the majority of users and partners. 8 monthly report of core ideas 1. The Web is data leakage a major channel 2. The Internet has become a data leak...
Federal CISOs Propose New Efforts to Shore Up Govt. Cybersecurity
Nearly six months removed from the OPM hack and with many government departments still reeling when it comes to security, several federal chief information security officers volunteered a handful of new ideas at last week’s Billington Cybersecurity Summit in Washington, D.C to combat future hacks...
Deleting WhatsApp Messages Before 90 Days Could Land you in Jail
While the Indian people continue to struggle for Net Neutrality, a new problem surrounded them with the release of the latest policy for ‘National Encryption Policy’ by the Indian Government. If you delete your WhatsApp Messages or Emails that you receive or send before 90 days, it might be a cri...
SQL injection vulnerability in the channelcode parameter of the government website building system belonging to Beijing Hezheng Software Co.
Government website system is a set of software developed specifically for government websites. A SQL injection vulnerability exists in the channelcode parameter of the government website system belonging to Beijing Hezheng Software Co. The vulnerability allows an attacker to exploit the...
SQL Injection Vulnerability in WebappCode Parameter of Government Website Building System of Beijing Hezheng Software Co.
Government website system is a set of software developed specifically for government websites. A SQL injection vulnerability exists in the webappCode parameter of the government website system belonging to Beijing Hezheng Software Co. The vulnerability allows an attacker to exploit the...
govsubportal.com XSS vulnerability
Vulnerable URL:...
asp.gov.al XSS vulnerability
Vulnerable URL: http://www.asp.gov.al/index.php/faqja-nuk-u-gjet/17-shqip/lajmet-e-fundit/7461-kamp-veror-me-300-femije-ne-perfundim-te-programit-sensibilizues-kunder-droges-organizuar-nga-policia-e-shtetit-drejtoria-e-arsimit-parauniversitar-programi-icitap-sacp-si-dhe-save-the-children? Details...
mpa.gov.br XSS vulnerability
Vulnerable URL: http://www.mpa.gov.br/monitoramento-e-controle/registro-geral-da-atividade-pesqueira-rgp/registro-e-licenca-de-aquicultor/56-assuntos/files/docs/Pesca/Gestaocompartilhada/CPG-Atuns-e-Afins/Reunioes-Ordinarias-CPG-Atuns-e-Afins-2000-a-2008/11-cpg-de-atuns-encaminhamentos.doc?...
tunjuelito.gov.co XSS vulnerability
Vulnerable URL: http://www.tunjuelito.gov.co/index.php/descargas-documentos/catview/26-transparencia-e-informes/28-informes-direccion-financiera/95-estados-de-actividad-economica-social-y-ambiental/96-estado-de-actividad-financiera-2011?limit=5=0=hits=ASC? Details: Description| Value ---|---...
Russian Hackers Hijack Satellite To Steal Data from Thousands of Hacked Computers
A group of Russian hackers, most notably the Turla APT Advanced Persistent Threat is hijacking commercial satellites to hide command-and-control operations, a security firm said today. Turla APT group, which was named after its notorious software Epic Turla, is abusing satellite-based Internet...
ASERT Threat Intelligence Report 2015-05 PlugX Threat Activity in Myanmar-vulnerability warning-the black bar safety net
0x01 summary Myanmar is currently one engaged in important political activity of the country. 2 0 1 1 years of democratic reform is to help the government create a conducive to attract investors to the atmosphere. The country is rich in resources, has a variety of Natural Resources and stable...
Government Releases Policy on Vulnerability Discovery and Disclosure
After more than a year of legal wrangling, the federal government has agreed to hand over its policy on vulnerability use and disclosure. The government had said that the policy was classified and too sensitive to release, but relented late last week and sent the document to the EFF, albeit a...
26 Android Phone Models Shipped with Pre-Installed Spyware
Bought a brand new Android Smartphone? Don't expect it to be a clean slate. A new report claims that some rogue retailers are selling brand-new Android smartphones loaded with pre-installed software. Security firm G Data has uncovered more than two dozens of Android smartphones from popular...
OPM Hack Victims Still Haven't Been Notified
Millions of government workers whose information was implicated in this year’s expansive Office of Personnel Management hack still haven’t been notified, the agency revealed this week. The agency announced Tuesday that it would contact 21.5 million federal employees and contractors “later this...
FBI’s Cyber Task Force Identifies Stealthy FF-RATs used in Cyber Attack
In both April and June this year, a series of cyber attacks was conducted against the United States Office of Personnel Management OPM. These attacks resulted in 21 million current and former Federal government employees’ information being stolen. After months of investigation, the FBI’s Cyber Ta...
Generalized SQL Injection Vulnerability in CMS System of China's Government and Enterprise Network (GEN)
China government and enterprise network is a network platform for enterprises and institutions to provide Internet marketing consultants. A generic SQL injection vulnerability exists in the CMS system of China Government and Enterprise Network. The vulnerability parameter is key, the attacker can...
Github Mitigates DDoS Attack
Code repository Github mitigated a distributed denial-of-service attack, restoring services this morning around 9 a.m. Eastern time. According to a Github status log, connectivity problems began today around 5:30 a.m. with Github declaring it was under a DDoS attack an hour later. A request for...