Huawei UMA Information Disclosure Vulnerability

Huawei UMA Unified Maintenance and Audit is a unified IT core resource operation and maintenance management and security audit platform designed for carriers, government, finance, electric power and large enterprises. Huawei UMA suffers from an information disclosure vulnerability that could be...

HTTPS best practices: pshtt

HTTPS best practices “pshtt” is the sound you make when you feel mildly astonished. pshtt “pushed” is a tool to scan domains for HTTPS best practices. It saves its results to a CSV or JSON. pshtt was developed to push organizations— especially large ones like the US Federal Government — to adopt...

Unknown Bidder Buys 2,700 Bitcoins (worth $1.6 million) at US Government Auction

A winning anonymous bidder bought 2,700 Bitcoins worth roughly $1.6 Million in an auction held by the United States Marshals Service USMS on Monday. The US government announced at the beginning of this month its plans to auction 2,719 Bitcoins that were seized during several criminal, civil and...

The NSA Hack — What, When, Where, How, Who & Why?

You might have heard about the recent ongoing drama of NSA hack that has sparked a larger debate on the Internet concerning abilities of US intelligence agencies as well as their own security. Saturday morning the news broke that a mysterious group of hackers calling themselves "The Shadow Broker...

mpp.sarawak.gov.my XSS vulnerability

Vulnerable URL: http://mpp.sarawak.gov.my/modules/web/pages.php?lang=en"=webpage⊂=page=113 Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 12:34 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Guccifer 2.0 Leaks Personal Info of Nearly 200 Congressional Democrats

The hacker, who recently claimed responsibility for the high-profile hack of Democratic National Committee DNC, has now taken credit for hacking into the Democratic Congressional Campaign Committee DCCC as well. To prove his claims, the hacker, going by the moniker Guccifer 2.0, dumped on Friday...

The wave of government approval platform ECGAP /FeedBack/ProcessValue. aspx file num parameter SQL injection vulnerability

No description provided by source...

The wave of government approval platform ECGAP /FeedBack/ProcessValue. aspx file num parameter SQL injection vulnerability

No description provided by source...

The wave of government approval platform ECGAP /Bulletin/DocmentDownload. aspx file ID parameter SQL injection vulnerability

No description provided by source...

planeacion.cali.gov.co XSS vulnerability

Vulnerable URL: http://planeacion.cali.gov.co/dapweb/index.asp?ID=587;...

Export-Grade Crypto Patching Improves

LAS VEGAS – The FREAK, LOGJAM and DROWN attacks of the last 17 months weren’t just the work of academics and security researchers who found a cool way to unmask encrypted traffic. They were ugly reminders of the Crypto Wars of the 1990s and why export-grade cryptography and intentional encryption...

www7.mels.gouv.qc.ca XSS vulnerability

Vulnerable URL: https://www7.mels.gouv.qc.ca/dc/evaluation/index.php?page=recherche";...

FBI 'Double Agent' Pleads Guilty to Selling 'Classified Information' to China

An FBI electronics technician has pleaded guilty to acting as a Chinese secret agent and passing along sensitive information about the Feds to a Chinese government official. Kun Shan "Joey" Chun, 46, admitted in federal court in Manhattan on Monday that he violated his security clearance on sever...

Hillary Clinton's Presidential Campaign also Hacked in Attack on Democratic Party

There's a lot more to come from the DNC Hack. The Associated Press confirmed yesterday that the computer systems used by Hillary Clinton's presidential campaign were hacked as part of the recent Democratic National Convention DNC hack. Last week's email dump containing almost 20,000 emails from t...

DHS Announces Cyber Incident Reporting Information

The United States Department of Homeland Security DHS has released guidelines and points of contact for reporting cyber incidents to the Federal Government. This communication follows the recent release of Presidential Policy Directive 41 PPD-41—United States Cyber Incident Coordination—which...

poacores2020.azores.gov.pt XSS vulnerability

Vulnerable URL:...

azores.gov.pt XSS vulnerability

Vulnerable URL: http://www.azores.gov.pt/Portal/pt/temas/cidadao/Protec%c3%a7%c3%a3o+Civil/default.htm?lang=%5B%27pt%27%5D=%5B%27ct%27%5D%2F%3E%3CmArquee%20onStart%3Donmouseleavealert1%20%20%3Csvg%3E%3Cscript%20/%20///%3Eu0061lu0065rt%60X%60%3C/x+x Details: Description| Value ---|--- Patched:| No...

White House Beefs Up Cyber Threat Response Action Plan

President Barack Obama signed a Cyber Incident Coordination policy directive on Tuesday that puts processes in place for how the government will respond to malicious or accidental threats to the nation’s public and private cyber infrastructure. The White House directive is designed to improve...

Attributing Advanced Attacks Remains Challenge For Researchers

Amid the connections being made between the Russian government and the attack on the Democratic National Committee DNC, researchers on Tuesday reminded us of the challenges security experts have in correctly attributing advanced attacks. In a wide-ranging Reddit AMA, members of Kaspersky Lab’s...

dpe.portal.gov.bd XSS vulnerability

Open Bug Bounty ID: OBB-169493 Description| Value ---|--- Affected Website:| dpe.portal.gov.bd Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...