XSS vulnerabilities in Megapolis.Portal Manager

Hello 3APA3A! These are Cross-Site Scripting vulnerabilities in Megapolis.Portal Manager. It's commercial CMS from Softline-IT earlier Softline, which in particularly widespread among Ukrainian government sites including ministry, parliament, two special services and many other web sites. In 2012...

Megapolis.Portal Manager Cross Site Scripting

Hello list! These are Cross-Site Scripting vulnerabilities in Megapolis.Portal Manager. It's commercial CMS from Softline-IT earlier Softline, which in particularly widespread among Ukrainian government sites including ministry, parliament, two special services and many other web sites. In 2012 I...

Effects full version Windows: iSIGHT surveillance espionage found Windows latest 0day vulnerabilities-vulnerability warning-the black bar safety net

the iSIGHT in Russian cyber-espionage discovered to affect all versions of Windows System with the latest 0day vulnerabilities, vulnerability number CVE-2 0 1 4-4 1 1 4, At present, Microsoft is the emergency of the vulnerability of making the patch. ! Yesterday, Microsoft partners iSIGHT Partner...

Sandworm APT Team Found Using Windows Zero Day Vulnerability

UPDATE–A cyberespionage team, possibly based in Russia, has been using a Windows zero day vulnerability to target a variety of organizations in several countries, including the United States, Poland, Ukraine and western Europe. The vulnerability, which will be patched today by Microsoft, is...

Microsoft Windows Zero-Day Vulnerability "CVE-2014-4114" Used to Hack NATO

Once again a Russian cyber espionage group has gained media attention by exploiting a Zero-day vulnerability in Microsoft’s Windows operating system to spy on the North Atlantic Treaty Organization NATO, Ukrainian and Polish government agencies, and a variety of sensitive European industries over...

Twitter Files Suit Over Government Restrictions on National Security Letter Data

Twitter has filed a lawsuit in federal court asking that the United States Department of Justice’s prohibitions on publishing the number and kind of government requests for data the company receives be declared unconstitutional. The suit claims that the rules infringe on Twitter’s right to free...

Experts Laud Changes to iPhone, Android Encryption

The changes that both Google and Apple have made to their mobile operating systems to encrypt the data on users’ devices have generated praise from the security and privacy communities and vitriol and criticism from the law enforcement and political worlds in equal measure. The changes to iOS and...

A station group system vulnerabilities to cause is the station point all getshell(involving government, schools, businesses and other large sites)-vulnerability warning-the black bar safety net

Brief description: A background 2 0 plurality of the gov,all of the scored Shell Detailed description: IP address: 124.133.2.2 Background address: http://124.133.2.2/siteserver/login.aspx Use the Cookie trick to login Cookie read: BAIRONG. VC. ADMINLOGIN=6 8 8 7; SITESERVER. ADMINISTRATOR...

September 2014 Yahoo Transparency Report

There was less clamor from governments and law enforcement around the world for data collected and stored by Yahoo, but nonetheless, the technology giant still fielded more than 18,000 data requests over the first six months of the year. Yahoo yesterday released its third Transparency Report, and...

某政府行政cmssql注入漏洞

简要描述： rt 详细说明： 问题厂商：深圳太极软件有限公司 问题cms：jsp+sqlserver 注入全为sa权限 谷歌关键字：inurl:application/zwdt 问题出在 全局搜索 application/zwdt/query.jsp post:keyword= 选取五例： 1.http://www.lzxzsp.gov.cn sqlmap -u "http://www.lzxzsp.gov.cn/application/zwdt/query.jsp" --data "keyword=1&Submit3=%B2%E9%D1%AF" --dbs sqlmap -u...

As Bug Bounties Become the Norm, Challenges Remain

SEATTLE–For many years, Microsoft and other large software vendors resisted the idea of providing bug bounties or other financial incentives for researchers to report vulnerabilities. That changed when the landscape began to shift and more researchers began reporting vulnerabilities through broke...

Chinese Penetrate TRANSCOM Amid Lack of Data Sharing

Hackers allegedly affiliated with the Chinese government compromised the computer networks of the United States Transportation Command, the group tasked with providing air, land and sea transportation services to the Department of Defense, according to the findings of a Senate Armed Services...

Apple CEO Tim Cook Says Company Dedicated to Protecting Users' Privacy

While much of the tech community is still swooning over the iPhone 6, Apple Pay and Apple Watch, the company’s top executive is spending a lot of time and energy trying to reassure customers that Apple is doing everything it can to protect their privacy and the security of their data. Apple CEO T...

White House: Internet Not Borderless, but Lacking Interior

WASHINGTON D.C. – In an afternoon keynote address at the Billington Cybersecurity Summit yesterday, Michael Daniel, a special assistant to the president and White House Cybersecurity Coordinator, refuted the common sentiment that the Internet is difficult to defend because it is borderless. To th...

2014 Google Transparency Report Requests for Data Up Again

Against a backdrop of new surveillance programs being uncovered in New Zealand and allegations of the NSA and GCHQ’s penetration of Deutsche Telekom in Germany, Google yesterday published its biannual Transparency Report for the first half of 2014. Google’s numbers reflect not only a continually...

NSA Director Urges Cyber-Resilience at Billington Summit

WASHINGTON, D.C. – In his keynote address at the Billington Cybersecurity Summit, NSA Director and Commander of U.S. Cyber Command, Admiral Mike Rogers, explained that the Defense Department and corporate information security teams must focus on cyber-resiliency rather than total network...

Apple CEO Defends iMessage Security

Despite research published last year that demonstrated that Apple has the ability to decrypt users iMessages if it so chooses, Apple CEO Tim Cook said that the company does not hold the encryption key for those messages and couldn’t even produce the plaintext in response to a government order. In...

“Bleeding heart”vulnerability before the announcement may have been government agencies use-vulnerability warning-the black bar safety net

“Bleeding heart”vulnerability is already in the history of the Internet the most serious defects. However, the new study showed that“heart bleed”vulnerability in April broke before, there is no evidence that the heartbleed vulnerability has been used by hackers to large-scale use.“ Bleeding...

Documents in Long-Running Yahoo FISC Challenge Case Published

During a long-running secret dispute between Yahoo and government officials over the constitutionality of orders from the federal government to turn over data belonging to Yahoo users, the company was facing fines of $250,000 for refusing to comply with the order. The revelation is contained in a...

Dropbox Reports 80 Percent of Subpoenas Contain Gag Request

Most U.S. government subpoenas for data on Dropbox users are accompanied with a request not to inform the user in question. Dropbox legal counsel Bart Volkmer said those gag orders are repelled unless there is a valid court order. The revelation accompanied the release of the cloud storage...