tunjuelito.gov.co XSS vulnerability

Vulnerable URL: http://www.tunjuelito.gov.co/index.php/descargas-documentos/catview/26-transparencia-e-informes/28-informes-direccion-financiera/95-estados-de-actividad-economica-social-y-ambiental/96-estado-de-actividad-financiera-2011?limit=5=0=hits=ASC? Details: Description| Value ---|---...

Russian Hackers Hijack Satellite To Steal Data from Thousands of Hacked Computers

A group of Russian hackers, most notably the Turla APT Advanced Persistent Threat is hijacking commercial satellites to hide command-and-control operations, a security firm said today. Turla APT group, which was named after its notorious software Epic Turla, is abusing satellite-based Internet...

ASERT Threat Intelligence Report 2015-05 PlugX Threat Activity in Myanmar-vulnerability warning-the black bar safety net

0x01 summary Myanmar is currently one engaged in important political activity of the country. 2 0 1 1 years of democratic reform is to help the government create a conducive to attract investors to the atmosphere. The country is rich in resources, has a variety of Natural Resources and stable...

Government Releases Policy on Vulnerability Discovery and Disclosure

After more than a year of legal wrangling, the federal government has agreed to hand over its policy on vulnerability use and disclosure. The government had said that the policy was classified and too sensitive to release, but relented late last week and sent the document to the EFF, albeit a...

26 Android Phone Models Shipped with Pre-Installed Spyware

Bought a brand new Android Smartphone? Don't expect it to be a clean slate. A new report claims that some rogue retailers are selling brand-new Android smartphones loaded with pre-installed software. Security firm G Data has uncovered more than two dozens of Android smartphones from popular...

OPM Hack Victims Still Haven't Been Notified

Millions of government workers whose information was implicated in this year’s expansive Office of Personnel Management hack still haven’t been notified, the agency revealed this week. The agency announced Tuesday that it would contact 21.5 million federal employees and contractors “later this...

FBI’s Cyber Task Force Identifies Stealthy FF-RATs used in Cyber Attack

In both April and June this year, a series of cyber attacks was conducted against the United States Office of Personnel Management OPM. These attacks resulted in 21 million current and former Federal government employees’ information being stolen. After months of investigation, the FBI’s Cyber Ta...

Generalized SQL Injection Vulnerability in CMS System of China's Government and Enterprise Network (GEN)

China government and enterprise network is a network platform for enterprises and institutions to provide Internet marketing consultants. A generic SQL injection vulnerability exists in the CMS system of China Government and Enterprise Network. The vulnerability parameter is key, the attacker can...

Github Mitigates DDoS Attack

Code repository Github mitigated a distributed denial-of-service attack, restoring services this morning around 9 a.m. Eastern time. According to a Github status log, connectivity problems began today around 5:30 a.m. with Github declaring it was under a DDoS attack an hour later. A request for...

White House Support for CISA Worries Privacy Advocates

While Congress is enjoying its annual summer recess, privacy advocates are worried that the White House’s recent endorsement of the controversial CISA bill–which has been criticized by DHS officials, among others–will push the information-sharing bill over the goal line. The Cybersecurity...

Ashley Madison Hackers (with another 300GB Dump) – Wait, Cheaters! We haven't Yet Done

Over a month ago, a group of hackers breached the popular cheater's dating service Ashley Madison and its parent company Avid Life Media, affecting tens of Millions site customers private life and also dump the website's source code onto the dark web. The hackers behind the Ashley Madison hack, w...

JeeCMS Government Service Center Member Reservation SQL Injection Vulnerability

JEECMS is the domestic Java version of the open source web content management system java cms, jsp cms for short. JeeCMS Government Government Service Center , member reservation function SQL injection vulnerability exists. Allow attackers to exploit the vulnerability to obtain sensitive...

SQL Injection Vulnerability in Government Website System of Bazhong Wanshan Software Co.

Bazhong Wanshan Software Co., Ltd. is a software company specializing in serving Bazhong city government departments. A SQL injection vulnerability exists in the Bazhong Wanshan Software Government Website Building System, which allows attackers to exploit this vulnerability to obtain sensitive...

is.gov.mk XSS vulnerability

Vulnerable URL: http://is.gov.mk/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= derp Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:07 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13739220...

saudi.gov.sa XSS vulnerability

Vulnerable URL:...

Enorth Webpublisher CMS SQL Injection Vulnerability

Enorth Webpublisher CMS suffers from a remote SQL injection vulnerability. Title: ==== CVE-2015-5617Enorth Webpublisher CMS SQL Injection from deletependingnews.jsp cbNewsid Vendor: ====== http://products.enorth.com.cn/bfnrglxt/index.shtml Enorth Webpublisher CMS so far of the scale of tens of...

Twitter Adds Email Privacy Data to Transparency Report

The number of information requests Twitter is receiving from the United States government is increasing steadily, having risen roughly 50 percent in the first six months of this year compared to the last six months of 2014. In its latest transparency report, Twitter said that it received 2,436...

yemen.gov.ye XSS vulnerability

Vulnerable URL: http://yemen.gov.ye/portal/gov/%D8%A7%D9%84%D8%A3%D8%AE%D8%A8%D8%A7%D8%B1/tabid/959/mid/3178/Default.aspx?SearchTerm=%27%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert%28String.fromCharCode%2888,%2083,%2083,%2080,%2079,%2083,%2069,%2068%29%29%3C/script%3E Details: Description|...

Researchers to Share Details of Cyber-Terrorists Targeting Indian Government Officials

The Potential threat, range from very narrow to very broad, posed by Cyber-Terrorism has provoked considerable alarm. Terrorists involved in Cyber Espionage and Operations aim at gaining access to Nation's critical infrastructure involving both Government as well as Private sectors. The Frequency...

浪潮某政府系统通用SQL注入24处打包

简要描述： ... 详细说明： 某政府系统通用SQL注入24处打包。 案例：（23处GET注入+1处POST注入） 23处GET注入： http://www.whaac.gov.cn:8080/BusinessRegistration/BRProjectList.aspx?page=1&procode= http://www.cfdonline.org.cn/OutPortalCFD//BusinessRegistration/BRProjectList.aspx?page=1&procode=...