Government Demands for Verizon Customer Data Drop

The number of subpoenas, total orders and warrants that the United States government delivered to Verizon all dropped in the second half of 2014, according to the company’s latest transparency report. The giant telecom provider released data on Thursday that showed a decrease in subpoenas of abou...

Affordable Care Act Phishing Campaign

US-CERT is aware of a phishing campaign purporting to come from a U.S. Federal Government Agency. The phishing emails reference the Affordable Care Act in the subject and claim to direct users to health coverage information, but instead direct them to sites which attempt to elicit private...

某政府在用系统#通用SQL注入

简要描述： 影响案例很大,转应急中心把 详细说明： 案例如下： http://117.40.186.185:8008/outportal/transactlist/searchtransactlist.jsp?applysubject= http://wssp.jdz.gov.cn/outportal/transactlist/searchtransactlist.jsp?applysubject= http://xzsp.jxgc.gov.cn/outportal/transactlist/searchtransactlist.jsp?applysubject=...

DHS Not Addressing Cyber Threats to Building Access Systems

Civil watchdogs at the Government Accountability Office are warning the Department of Homeland Security and the Government Services Agency about unaddressed risks posed to building access control systems at federal facilities. The systems in question are those that prevent unauthorized access to...

Encryption is Not the Enemy

There are few things scarier these days than a politician stepping in front of a microphone, taking a deep breath and opening his mouth to pontificate on security. A long list of American elected officials have reinforced this, and on Monday, UK Prime Minister David Cameron jumped to the head of...

某大型政府服务系统Oracle注入(使用量大)

简要描述： 某大型政府服务系统Oracle注入使用量大 详细说明： 问题厂商:深圳太极软件有限公司 一套专门的政务服务系统 用户量：大 影响：广 注入点 /researchinfo.do?method=queryinfo&id=1（id存注入） /researchinfo.do?method=querysx&deptid=1（deptid存注入） 证明： google关键字：inurl:bmtd.do? 漏洞证明： http://www.yjxzfw.com.cn/researchinfo.do?method=queryinfo&id=1 sqlmap.py -u...

某大型政府服务系统Oracle注入(使用量大)

简要描述： rt，霍霍。为了生活费也是蛮拼的。。。。 详细说明： 问题厂商:深圳太极软件有限公司 一套专门的政务服务系统 用户量：大 影响：广 注入点 browsebgxz.do?method=dept&deptid=（deptid存注入） google关键字：inurl:browsebgxz.do?method= 案例: http://www.gygxzw.gov.cn:8066/browsebgxz.do?method=dept&deptid=556631684 http://61.189.156.73/browsebgxz.do?method=dept&deptid=0094204...

Indian Government blocks 32 Sites, including GitHub, Pastebin, Imgur and Vimeo

China is known as the nation of 'global internet censorship', and the country proved it many times, in fact when recently it blocked the access to Gmail from the country. Now, it seems that its northern neighbouring country, India doesn't want to get left behind. On Wednesday, the Indian Computer...

某大型政府系统任意文件读取及Oracle注入

简要描述： 某大型政府系统任意文件读取及Oracle注入 详细说明： 这系统有人提交过，详情： WooYun: 某大型政府服务系统Oracle注入使用量大 文件读取（获取数据库用户、密码等）： /download?url=../../WEB-INF/classes/wssp/util/dbconfig.properties http://hxasc.cn/download?url=../../WEB-INF/classes/wssp/util/dbconfig.properties...

某政府信息公开系统存在SQL注入

简要描述： RT 详细说明： 吉大正元信息技术股份有限公司:http://www.jit.com.cn/ 众多政府网站都在使用该系统。 我就用5个案例来测试 注入链接： /zwdtSjgl/info/gonggaoiframe.jsp?cid= 案例： http://222.34.78.21/zwdtSjgl/info/gonggaoiframe.jsp?cid=3 http://218.27.207.22/zwdtSjgl/info/gonggaoiframe.jsp?cid=3...

Lizard Squad vs Anonymous — 'PlayStation, Xbox and Tor Network' Attacks

It was the sad Christmas day for gamers all around the world!! A lot of people get new PlayStations and Xboxes on Christmas, but this Christmas they bought the game, popped it into the console for online gaming, and what they found? Oh Crap! I can't log on. It was the notorious hacker group "Liza...

某政府信息公开系统存在SQL注入

简要描述： RT 详细说明： 吉大正元信息技术股份有限公司:http://www.jit.com.cn/ 众多政府网站都在使用该系统 我就用5个案例来测试。 注入链接是： /zwdtSjgl/infoIndex.jsp?channelCid= 案例： http://218.27.207.22/zwdtSjgl/infoIndex.jsp?channelCid=6 http://218.27.190.107:8080/zwdtSjgl/infoIndex.jsp?channelCid=9...

某政府信息公开系统存在SQL注入

简要描述： RT 详细说明： 吉大正元信息技术股份有限公司:http://www.jit.com.cn/ 众多政府网站都在使用该系统 我就用5个案例来测试。 注入链接是： /zwdtSjgl/infoDetail.jsp?id= 案例： http://www.ilj.gov.cn/zwdtSjgl/infoDetail.jsp?id=461 http://218.62.81.171/zwdtSjgl/infoDetail.jsp?id=461 http://218.62.100.33:8000/zwdtSjgl/infoDetail.jsp?id=146...

某政府信息公开系统存在SQL注入

简要描述： RT 详细说明： 吉大正元信息技术股份有限公司:http://www.jit.com.cn/ 众多政府网站都在使用该系统。 我就用5个案例来测试。 注入链接是： /zwdtSjgl/Manual/Manual.jsp?depid= 案例： http://218.27.140.5/zwdtSjgl/Manual/Manual.jsp?depid=013524006 http://218.62.100.33:8000/zwdtSjgl/Manual/Manual.jsp?depid=01361537-0...

某政府信息公开系统存在SQL注入

简要描述： RT 详细说明： 吉大正元信息技术股份有限公司:http://www.jit.com.cn/ 众多政府网站都在使用该系统 我就用5个案例来测试。 注入链接是： /zwdtSjgl/Directory/showNsjg.jsp?NsjgId= 案例： http://122.143.239.70:8090/zwdtSjgl/Directory/showNsjg.jsp?NsjgId=1736 http://222.160.175.90/zwdtSjgl/Directory/showNsjg.jsp?NsjgId=1769...

某政府信息公开系统存在SQL注入

简要描述： RT 详细说明： 吉大正元信息技术股份有限公司:http://www.jit.com.cn/ 众多政府网站都在使用该系统 我就用5个案例来测试。 注入链接是： /zwdtSjgl/Directory/showLeader.jsp?LeadId= 漏洞证明： 案例一： http://218.27.190.107:8080/zwdtSjgl/Directory/showLeader.jsp?LeadId=2986 案例二： http://122.143.239.70:8090/zwdtSjgl/Directory/showLeader.jsp?LeadId=3261 案例三：...

The SS7 network to save significant vulnerability that everyone can monitor mobile phones-vulnerability warning-the black bar safety net

Recently, German researchers found that the mobile security vulnerabilities these vulnerabilities enable hackers, spies and criminals take advantage of, you can large-scale wiretapping of private telephone and steal a mobile phone short message, even if the mobile phone network using the current...

Page Source Code Leakage Vulnerability of Time Collaboration Government Affairs Open Portal System

Xi'an Synergy Time Software Co., Ltd SYNSOFT, located in Xi'an Hi-Tech Industrial Development Zone, is a leading middleware product supplier in China, and the most complete integrated middleware series product provider in China. Some pages of Synergy Time government system do not have complete...

某政府信息公开系统存在SQL注入

简要描述： RT 详细说明： 吉大正元信息技术股份有限公司:http://www.jit.com.cn/ 众多政府网站都在使用该系统。 我就用5个案例来测试。 注入链接是： /zwdtSjgl/Directory/iframeAgencyFunctions.jsp?departmentno= 案例： http://218.27.207.22/zwdtSjgl/Directory/iframeAgencyFunctions.jsp?departmentno=1...

FBI Officially Blames North Korea in Sony Hacks

The FBI announced today that it has gathered enough evidence to say with certainty that the government of the Democratic People’s Republic of Korea is in fact responsible for recent intrusions into the networks of Sony Pictures Entertainment SPE. This fact was all but officially stated yesterday...