Harley Geiger on Cybersecurity Policy

Harley Geiger, director of public policy at Rapid7, talks to Threatpost editor Mike Mimoso at RSA Conference 2017 about how policy goes hand in hand with technology when it comes to cybersecurity, the government’s focus on IoT and critical infrastructure, and the role independent security researc...

Stored Cross-Site Scripting Vulnerability in Beijing Topsy's Government Affairs System

Beijing Topsy's government system is an intensive service platform based on cloud PAAS, with all kinds of portal government services, public services as the core, relying on mature big data, cloud computing, mobile Internet, content management, full-text search and other technologies, in accordan...

UK Demands Encryption Backdoor As London Terrorist Used WhatsApp Before the Attack

The government has once again started asking for backdoor in encrypted services, arguing that it can not give enough security to its citizens because the terrorists are using encrypted apps to communicate and plot an attack. Following last week's terrorist attack in London, the UK government is...

Bejtlich Moves On

Exactly six years ago today I announced that I was joining Mandiant to become the company's first CSO. Today is my last day at FireEye, the company that bought Mandiant at the very end of 2013. The highlights of my time at Mandiant involved two sets of responsibilities. First, as CSO, I enjoyed...

Fileless Malware Campaigns Tied to Same Attacker

Two recent fileless malware campaigns targeting financial institutions, government agencies and other enterprises have been linked to the same attack group. The campaigns, disclosed by Kaspersky Lab and Cisco’s Talos research outfit in the last five weeks, made extensive use of fileless malware a...

Thailand Government Sites CMS data.php parameter id SQL injection vulnerability

No description provided by source...

Code Execution Vulnerability in Ohu Government System/design/edittheme1.php

Ohuhu government system is the government portal system of Shanghai Ohuhu Network Technology Co. A code execution vulnerability exists in the Ohuhu government system /design/edittheme1.php. An attacker can exploit this vulnerability to execute arbitrary php code...

SQL Injection Vulnerability in getsyscat.php File of Ohu Government System

Ohuhu government system is the government portal system of Shanghai Ohuhu Network Technology Co. A SQL injection vulnerability exists in the getsyscat.php file of the Ohuhu Government System. An attacker can exploit this vulnerability to execute arbitrary SQL statements and obtain sensitive...

Ohu Government System /design/edittheme.php Code Execution Vulnerability

Ohuhu government system is the government portal system of Shanghai Ohuhu Network Technology Co. A code execution vulnerability exists in /design/edittheme.php. An attacker can exploit this vulnerability to execute arbitrary php code...

Ohu Government System/design/catid_user_save.php Code Execution Vulnerability

Ohuhu government system is the government portal system of Shanghai Ohuhu Network Technology Co. A code execution vulnerability exists in the Eurohoo government system/design/catidusersave.php. An attacker can exploit the vulnerability to execute arbitrary php code...

SQL Injection Vulnerability in Province_city1.php File of Ohu Government System

Ohuhu government system is the government portal system of Shanghai Ohuhu Network Technology Co. A SQL injection vulnerability exists in the provincecity1.php file of the Ohuhu government system. An attacker can exploit this vulnerability to execute arbitrary SQL statements and obtain sensitive...

SQL Injection Vulnerability in catid_save.php File of Ohu Government System

Ohuhu government system is the government portal system of Shanghai Ohuhu Network Technology Co. A SQL injection vulnerability exists in the catidsave.php file of the Ohuhu government system. An attacker can exploit the vulnerability to execute arbitrary SQL statements and obtain sensitive...

Ohoo Government System ohocms_viewcode.php Arbitrary File Read Vulnerability

Ohuhu government system is the government portal system of Shanghai Ohuhu Network Technology Co. There is an arbitrary file read vulnerability in the ohocmsviewcode.php file of the Ohu government system. An attacker can exploit this vulnerability to read arbitrary files...

Eurohoo Government System set_border_color.php File Remote Command Execution Vulnerability

Ohuhu government system is the government portal system of Shanghai Ohuhu Network Technology Co. A remote code execution vulnerability exists in the setbordercolor.php file of the Ohuhu Government System due to improper filtering. An attacker can exploit this vulnerability to execute arbitrary ph...

SQL Injection Vulnerability in Province_city.php File of Ohu Government System

Ohuhu government system is the government portal system of Shanghai Ohuhu Network Technology Co. A SQL injection vulnerability exists in the provincecity.php file of the Ohuhu government system. An attacker can exploit this vulnerability to execute arbitrary SQL statements and obtain sensitive...

SQL Injection Vulnerability in jg_city.php File of Ohu Government System

Ohuhu government system is the government portal system of Shanghai Ohuhu Network Technology Co. A SQL injection vulnerability exists in the jgcity.php file of the Ohuhu government system. An attacker can exploit this vulnerability to execute arbitrary SQL statements and obtain sensitive...

SQL Injection Vulnerability in getjwj.php File of Ohu Government System

Ohuhu government system is the government portal system of Shanghai Ohuhu Network Technology Co. A SQL injection vulnerability exists in the getjwj.php file of the Ohuhu Government System. An attacker can exploit this vulnerability to execute arbitrary SQL statements and obtain sensitive...

Remote Code Execution Vulnerability in custom_design.php File of Ohuhu Government System

Ohuhu government system is the government portal system of Shanghai Ohuhu Network Technology Co. A remote code execution vulnerability exists in the customdesign.php file of the Ohuhu government system. An attacker can exploit this vulnerability to execute arbitrary php code...

Design_edittheme2.php Arbitrary File Write Vulnerability in Ohoo Government System

Ohuhu government system is the government portal system of Shanghai Ohuhu Network Technology Co. An arbitrary file write vulnerability exists in the designedittheme2.php file of the Ohuhu government system. This vulnerability allows attackers to write arbitrary files and gain server privileges...

base-donnees-publique.medicaments.gouv.fr XSS vulnerability

Vulnerable URL: http://base-donnees-publique.medicaments.gouv.fr/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...