某政府网上审批系统通用SQL注入7处打包

简要描述： 详细说明： 某政府网上审批系统通用SQL注入7处打包。 7处注入案例： http://.../workplate/base/org/WebUserList.aspx?id=99 http://.../workplate/base/org/WebUserList.aspx?id=99 http://.../workplate/base/org/WebUserList.aspx?id=99 http://.../workplate/base/org/WebUserList.aspx?id=99...

Stolen U.S. Government Credentials Found Online

Credentials stolen in breaches and sundry hacks belonging to close to 100 unique U.S. government domains are scattered among a number of paste sites and are searchable in other locations online. Analysts at Recorded Future said on Wednesday that through open source intelligence gathering and...

WhatsApp Ranked Worst at Protecting Your Privacy and Data

The Electronic Frontier Foundation has released its annual report card of tech companies for 2015 based upon how much they keep your personal data secure from government snoops. And the Worst Companies Award goes to… 1. At&T 2. WhatsApp 3. Verizon Yes, you heard right! WhatsApp is one of the thre...

Major Carriers AT&T, Comcast Continue to Lag in EFF Privacy Report

While many companies have made strides when it comes to how they handle transparency and government requests post-Snowden, major telecoms such as AT&T and Verizon continue to lag behind. Despite publishing transparency reports within the last year, the two companies scored the lowest on the...

某政府在用系统存在通用SQL注入

简要描述： rt 详细说明： 某政府在用系统存在通用SQL注入。 案例： http://218.56.40.229:8037//newsymItemView/Item2.aspx?id=021973 http://123.134.189.60:8022//newsymItemView/Item2.aspx?id=021973 http://222.135.109.70:8200//newsymItemView/Item2.aspx?id=021973 http://218.56.99.84:8003//newsymItemView/Item2.aspx?id=021973...

Congress Looking Into Restricting Power of Government-Owned CAs

UPDATE–As the debate over potential government interference with encryption technologies rages in countries around the world, Congress is now going down a different path, asking technology companies whether it’s feasible and potentially effective for certificate authorities to restricting the way...

Apple Pushing Developers Toward HTTPS Connections in Apps

Apple is encouraging developers who create apps for iOS to begin moving their apps to an HTTPS-only model as soon as possible in an effort to thwart eavesdropping on insecure, plaintext HTTP connections. The move is yet one more sign that major Internet and technology companies are becoming ever...

Federal Agencies to Move to HTTPS-Only Connections

Following the lead of many major Web services, the White House on Monday announced that it would move all of the federal government’s public sites and services to HTTPS-only. Tony Scott, the federal CIO, has issued a memorandum to all federal agencies and departments instructing them to move all ...

Wassenaar, Bug Bounties and Vulnerability Rewards Programs

Bug bounties have gone from novelty to necessity, not only for enterprises looking to take advantage of the skills of an organized pool of vulnerability hunters, but also for a slew of independent researchers who make a living contributing to various vendor and independent bounty and reward...

Rights Groups Call for More Change Two Years After Snowden Revelations Began

It’s been two years now since the first stories about NSA surveillance capabilities began to appear, and the environment has shifted dramatically in that time. Awareness of and resistance to mass surveillance has increased greatly, but the changes to policy and laws that many observers had hoped...

某政府在用系统通用型SQL注入#10

简要描述： rt 详细说明： 某政府在用系统通用型SQL注入10。 案例如下： http://221.2.149.28:8090/lslp/WHOut/DistrictIndexSc.aspx?DFID=JQ http://www.rcsp.cn:8083/lslp/WHOut/DistrictIndexSc.aspx?DFID=JQ http://222.135.78.34:8083/lslp/WHOut/DistrictIndexSc.aspx?DFID=JQ...

某政府在用系统通用型SQL注入#9

简要描述： rt 详细说明： 某政府在用系统通用型SQL注入9。 案例： http://www.lgqzwfw.gov.cn/xspww/InteractiveCommunication/InterActiveIndex.aspx http://60.215.8.148:6006//InteractiveCommunication/InterActiveIndex.aspx http://www.lgqzwfw.gov.cn/xspww/InteractiveCommunication/InterActiveIndex.aspx...

SQL injection vulnerability in txtContent parameter in InteractiveCommunication/InterActiveIndex.aspx of Wave Government Service Platform

Wave software government system is an industry informatization application system built on the basis of cloud computing and big data. There is a SQL injection vulnerability in the txtContent parameter of the InteractiveCommunication/InterActiveIndex.aspx of the Wave government service platform,...

Security Researchers Publish Comments on Wassenaar Rules

With the two-month comment period for the proposed U.S. Wassenaar Arrangement rules barely under way, a cast of influential security researchers has wasted no time preparing and submitting their thoughts on the controversial proposal. Researchers who seek out vulnerabilities in software—developin...

某政府在用系统通用型SQL注入#5

简要描述： rt 详细说明： 某政府在用系统通用型SQL注入5。 山东浪潮齐鲁软件产业股份有限公司 http://www.inspur.com/ 案例如下： http://www.whaac.gov.cn:8080/InteractiveCommunication/ProjectList.aspx?sxname= http://www.rcsp.cn/InteractiveCommunication/ProjectList.aspx?sxname=...

online.moha.gov.my XSS vulnerability

Vulnerable URL: http://online.moha.gov.my/ePermit/index.php?mod=lesen=certviewid=34073id=4554id=28635%27%22%3E%3Csvg/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 08:54 GMT Vulnerability type:| XSS Vulnerabilit...

某政府在用系统通用型SQL注入#3

简要描述： rt 详细说明： 某政府在用系统通用型SQL注入3。 案例如下: http://wssp.jiangxi.gov.cn:8008/outportal/licenseManage/licenseManage.jsp http://117.40.187.175:8008/outportal/licenseManage/licenseManage.jsp http://xzfw.jinxi.gov.cn/outportal/licenseManage/licenseManage.jsp...

某政府在用系统通用型SQL注入#2

简要描述： rt 详细说明： 某政府在用系统通用型SQL注入2。 山东浪潮齐鲁软件产业股份有限公司 http://www.inspur.com/ 案例： http://117.40.187.175:8008/outportal/bulletin/Businessview.jsp?businessid=8080812a897481012a9761f71e0618 http://218.65.59.94/outportal/bulletin/Businessview.jsp?businessid=018ae42b585524012b5983103e01a5...

UK Government Rewrites Laws to Let GCHQ Hack Into Computers Legally

The UK Government has quietly changed the Anti-Hacking Laws quietly that exempt GCHQ, police, and other electronic intelligence agencies from criminal prosecution for hacking into computers and mobile phones and carrying out its controversial surveillance practices. The details of the changes wer...

The Great... Great... Firewall of China Hijacks Facebook Connect Plugin

From past few days, Internet Users in China are dealing with a weird redirection of traffic nationwide while accessing any website that makes use of connect.facebook.net resource. Great Firewall of China, which is infamous for the Internet censorship by Chinese government, believes to be...