le.utah.gov XSS vulnerability

Vulnerable URL: http://le.utah.gov/asp/interim/commit.asp?Year=2015=HSTTRA%3C!%27/!%22/!%27/%22/--!%3E%3C/Title/%3C/script/%3E%3CInput/Autofocus/%0D/Onfocus=confirmXSSPOSED%20//%3E%3CSvg%3E=13585 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability...

jerseyvetlab.nj.gov XSS vulnerability

Vulnerable URL:...

Policy Experts Push To Make Vulnerability Equities Process Law

The U.S. government’s role in vulnerability disclosures is a vital part of our national security and should be codified in law, said a group of policy experts at a panel discussion last week at the RSA Conference. The panelists argued that the government’s current process of vulnerability use and...

Spear Phishing Techniques Used in Attacks Targeting the Mongolian Government

Introduction FireEye recently observed a sophisticated campaign targeting individuals within the Mongolian government. Targeted individuals that enabled macros in a malicious Microsoft Word document may have been infected with Poison Ivy, a popular remote access tool RAT that has been used for...

Spear Phishing Techniques Used in Attacks Targeting the Mongolian Government

Introduction FireEye recently observed a sophisticated campaign targeting individuals within the Mongolian government. Targeted individuals that enabled macros in a malicious Microsoft Word document may have been infected with Poison Ivy, a popular remote access tool RAT that has been used for...

btb.termiumplus.gc.ca XSS vulnerability

Vulnerable URL: http://www.btb.termiumplus.gc.ca/tpv2alpha/alpha-eng.html?lang=eng=1'"--!confirmOPENBUGBOUNTY//...

Data Stealing Malware TeamSpy Resurfaces in Spam Campaign

After almost a four-year respite, the data-stealing TeamSpy malware has resurfaced, or at least that’s what a spam campaign detected over the weekend suggests, researchers say. Researchers at the CrySyS Lab in Hungary originally identified the malware back in March 2013 when they traced it back t...

Schneier Brings Campaign for IoT Regulation to RSA

SAN FRANCISCO—Bruce Schneier on Tuesday called on technologists to get involved with policy, insisting that as the Internet of things continues to unfold, the knowledge security experts have will become more applicable. Schneier, CTO of IBM Resilient, stressed in a talk here at the RSA Conference...

New “Fileless Malware” Targets Banks and Organizations Spotted in the Wild

More than a hundred banks and financial institutions across the world have been infected with a dangerous sophisticated, memory-based malware that's almost undetectable, researchers warned. Newly published report by the Russian security firm Kaspersky Lab indicates that hackers are targeting bank...

krasnopolie.gov.by XSS vulnerability

Vulnerable URL: http://www.krasnopolie.gov.by/plugins/content/jwallvideos/jwallvideos/includes/js/mediaplayer/player.swf?Debug=promptopenbugbounty Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

caerffili.gov.uk XSS vulnerability

Vulnerable URL: http://www.caerffili.gov.uk/50plus/flash/mediaplayer.swf?file=../flash/projectstory.flv?file=http://content.bitsontherun.com/videos/bkaovAYt-364766.flv=falseℑ=http://appsec.ws/ExploitDB/cMon.jpg=true=javascript:confirm/openbugbounty/;//=blank&.swf Details: Description| Value ---|-...

ird.govt.nz XSS vulnerability

Vulnerable URL: https://ird.govt.nz/images/flash/mediaplayer-viral/player.swf?debug=promptopenbugbounty Details: Description| Value ---|--- Patched:| Yes, at 28.11.2017 Latest check for patch:| 28.11.2017 07:04 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 347...

ophq.gouv.qc.ca XSS vulnerability

Vulnerable URL: https://www.ophq.gouv.qc.ca/typo3conf/ext/nurlecteurvideo/res/player.swf?debug=confirmopenbugbonuty Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

juegosycasinos.mendoza.gov.ar XSS vulnerability

Vulnerable URL: http://juegosycasinos.mendoza.gov.ar/buscador?busqueda= XANY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

Bill Calls for Study of Cybersecurity Standards for Cars

A House bill was introduced Tuesday that could accelerate the federal government’s involvement in regulating automobile cybersecurity. The Security and Privacy in Your Car Study Act of 2017, authored by Reps. Ted Lieu D-Calif. and Joe Wilson R-SC, calls on the National Highway Traffic Safety...

China makes VPNs illegal to tighten its Great Firewall

China is long known for its strict Internet censorship laws through the Great Firewall of China – China's Golden Shield project that employs a variety of tricks to censor Internet and block access to various foreign websites in the country by its government. The Great Firewall has blocked some 17...

Hack the Army Bounty Pays Out $100,000

The U.S. Army on Thursday shared the outcome of its first bug bounty, which concluded a three-week trial on Dec. 21, calling the program a success. The Hack The Army bounty, announced last fall, was the second such government rewards program, debuting months after the conclusion of the Hack the...

Check Box 2016 Q2 Survey - Multiple Vulnerabilities

Check Box 2016 Q2 Survey - Multiple Vulnerabilities Exploit Title: Check Box 2016 Q2 Survey Multiple Vulnerabilities Exploit Author: Fady Mohamed Osman @fadyosman Exploit-db : http://www.exploit-db.com/author/?a=2986 Youtube : https://www.youtube.com/user/cutehack3r Date: Jan 17, 2017 Vendor...

Explained — What's Up With the WhatsApp 'Backdoor' Story?

What is a backdoor? By definition: "Backdoor is a feature or defect of a computer system that allows surreptitious unauthorized access to data, " either the backdoor is in encryption algorithm, a server or in an implementation, and doesn't matter whether it has previously been used or not...

APT28: At the Center of the Storm

On Jan. 6, 2017, the U.S. Director of National Intelligence released its Intelligence Community Assessment: Assessing Russian Activities and Intentions in Recent US Elections. Still, questions persist about Russian involvement. Did the Russian government direct the group responsible for the...