3851 matches found
U.S. Government Requests for Yahoo User Data Drop
Yahoo received nearly 5,000 requests for user data from the United States government in the last six months of 2014 and disclosed some content in nearly 25 percent of those cases. The company said in its new transparency report that it received between 0-999 National Security Letters from the U.S...
某政府系统#注入漏洞一枚
简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 案例如下： http://61.133.119.187:8091/newsymItemManage/Item2.aspx?id=1 http://222.135.76.147:8200/newsymItemManage/Item2.aspx?id=1 http://222.135.127.190:7200/newsymItemManage/Item2.aspx?id=1 http://221.2.149.47:8200/newsymItemManage/Item2.aspx?id=1...
某政府系统一处SQL注入
简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 案例如下： http://61.133.119.187:8091/newsymItemManage/Item5.aspx?id=1 http://222.135.76.147:8200/newsymItemManage/Item5.aspx?id=1 http://222.135.127.190:7200/newsymItemManage/Item5.aspx?id=1 http://221.2.149.47:8200/newsymItemManage/Item5.aspx?id=1...
某政府系统一处SQL注入
简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 案例如下： http://61.133.119.187:8091/newsymItemManage/Item4.aspx?id=1 http://222.135.76.147:8200/newsymItemManage/Item4.aspx?id=1 http://222.135.127.190:7200/newsymItemManage/Item4.aspx?id=1 http://221.2.149.47:8200/newsymItemManage/Item4.aspx?id=1...
某政府系统#注入漏洞一枚
简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 案例如下： http://61.133.119.187:8091/newsymItemManage/Item1.aspx?id=1 http://222.135.76.147:8200/newsymItemManage/Item1.aspx?id=1 http://222.135.127.190:7200/newsymItemManage/Item1.aspx?id=1 http://221.2.149.47:8200/newsymItemManage/Item1.aspx?id=1...
某政府系统#注入漏洞一枚
简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 案例如下： http://61.133.119.187:8091/newsymItemManage/Item3.aspx?id=1 http://222.135.76.147:8200/newsymItemManage/Item3.aspx?id=1 http://222.135.127.190:7200/newsymItemManage/Item3.aspx?id=1 http://221.2.149.47:8200/newsymItemManage/Item3.aspx?id=1...
某通用型政府建站系统SQL注入
简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 案例如下: http://222.135.127.190:7000/gov/SearchInfoSum.aspx?keyword= http://221.2.171.59:8000/gov/SearchInfoSum.aspx?keyword= http://222.135.109.70:8100/gov/SearchInfoSum.aspx?keyword= http://61.133.119.187:8089/gov/SearchInfoSum.aspx?keyword=...
某政府系统#注入漏洞一枚
简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 案例如下: /symItemManage/ItemForth.aspx?id=11 http://222.135.76.147:8200/symItemManage/ItemForth.aspx?id=11 http://222.135.127.190:7200/symItemManage/ItemForth.aspx?id=11 http://221.2.149.47:8200/symItemManage/ItemForth.aspx?id=11...
某政府系统一处SQL注入
简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 和这个漏洞 WooYun: 某政府系统一处SQL注入 是同一文件的但是不是同一目录下的注入，不知道算不算重复啊 案例如下： http://61.133.119.187:8091/symItemView/ItemFifth.aspx?id=1 http://222.135.76.147:8200/symItemView/ItemFifth.aspx?id=1 http://222.135.127.190:7200/symItemView/ItemFifth.aspx?id=1...
某政府系统一处SQL注入
简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 案例如下： http://61.133.119.187:8091/symItemView/ItemFourth.aspx?id=1 http://222.135.76.147:8200/symItemView/ItemFourth.aspx?id=1 http://222.135.127.190:7200/symItemView/ItemFourth.aspx?id=1 http://221.2.149.47:8200/symItemView/ItemFourth.aspx?id=1...
某政府系统#注入漏洞一枚
简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 和这个漏洞 WooYun: 某政府系统注入漏洞一枚 是同一文件的但是不是同一目录下的注入，而且，页面内容也不一样，不知道算不算重复啊 案例如下: http://61.133.119.187:8091/symItemView/ItemThird.aspx?id=1 http://222.135.76.147:8200/symItemView/ItemThird.aspx?id=1...
某政府系统两处注入打包
简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 和这个漏洞 WooYun: 某政府系统三处注入打包 是同一文件的但是不是同一目录下的注入，不知道算不算重复啊 第一处： http://61.133.119.187:8091/symItemView/ItemSixth.aspx?id=1 http://222.135.76.147:8200/symItemView/ItemSixth.aspx?id=1 http://222.135.127.190:7200/symItemView/ItemSixth.aspx?id=1...
某gov在用行政服务系统某处SQL注入(Oracle数据库)
简要描述： RT 详细说明： 其他注入点，如： WooYun: 某大型政府服务系统Oracle注入使用量大 WooYun: 某Gov行政中心系统Oracle注入漏洞使用量大 WooYun: 某gov行政服务系统Oracle数据库搜索型POST注入 这处注入出在：lawquery.do?lawID=0006&method=queryDetailLaw lasID存在注入 目前wooyun上还没人提交，如图搜索结果： 按照通用程序标准（案例+演示），部分案例如下：...
Facebook Transparency Report: Government Requests Down
Facebook today reported a slight drop in government requests for user data, bucking a trend that peaked during the first half of 2014 with the highest numbers the company had seen. Its latest transparency report covers the second half of last year, and shows slight dips in requests for user data,...
某gov行政服务系统Oracle数据库搜索型POST注入
简要描述： RT 详细说明： 排除该套系统其它注入点： WooYun: 某大型政府服务系统Oracle注入使用量大 WooYun: 某Gov行政中心系统Oracle注入漏洞使用量大 此处是一个POST注入，存在注入地方：spjggsQuery.do?method=busiinfoquery POST参数id存在注入 wooyun还没人提交，抢先。。如图： 按照通用程序标准（十个以上案例+演示），部分案例如下： http://119.1.108.246/spjggsQuery.do?method=busiinfoquery...
某政府信息公开系统存在SQL注入
简要描述： RT 详细说明： 吉大正元信息技术股份有限公司:http://www.jit.com.cn/ 众多政府网站都在使用该系统 我就用多个案例来测试。 注入链接是： searchTypeDir.jsp?departmentid= 案例： http://222.160.140.29:8000/zwdtSjgl/Directory/searchTypeDir.jsp?departmentid=DE200804031229450156&departmentname=市民族事务委员会&departmentType=1&title1code=12&typeDirName=年度政府信息公开工作...
CASPER Surveillance Malware Linked to French Government
Last month, cyber security researchers spotted a new strain of french surveillance malware, dubbed "Babar," which revealed that even French Government and its spying agency the General Directorate for External Security DGSE is dedicatedly involved in conducting surveillance operation just like th...
Komodia Certificate Manipulation Enabled Man-In-The-Middle Attacks
The shoddy state of SSL certificate validation on the Internet again floated to the surface, this time by the Superfish mess, which continues to get worse. The Electronic Frontier Foundation on Wednesday released a report based on data scoured from the Decentralized SSL Observatory which it...
‘DarkLeaks’ Black Market — Anonymously Selling Secrets for Bitcoins
An all new anonymous online underground black market website, DarkLeaks, has been introduced on the Internet where Whistleblowers, blackmailers, hackers and any individual can trade/sell sensitive and valuable data/secrets anonymously in exchange for Bitcoin payments. DarkLeaks is a decentralized...
Securing DNS Essential to Web's Future, Dan Kaminsky
CANCUN – “2015 got weird… really weird.” Those were some of the first words spoken by Dan Kaminsky in his talk today at the Kaspersky Security Analyst Summit Monday. He was referring to a few key events from the last several weeks: the Sony hack debacle, or what he called “North Korean or...