yemen.gov.ye XSS vulnerability

Vulnerable URL: http://www.yemen.gov.ye/portal/gov/الأخبار/tabid/959/mid/3178/Default.aspx?SearchTerm= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1331201 Google Pagerank| 6 VIP...

Wendy Nather on the Retail Cyber Intelligence Sharing Center

Dennis Fisher talks with Wendy Nather about her new role as the research director at R-CISC, the challenges of getting companies to share threat intelligence, how smaller retails can deal with breaches and threats, and how the government can play a role in information sharing. Download:...

government.ae XSS vulnerability

Vulnerable URL:...

SQL Injection Vulnerability in Websiteid Parameter of Government Information System of Beijing Xiangyu Leading Software Co.

One-stop government information disclosure system is a management system that realizes the construction of open government columns based on website groups. There is a SQL injection vulnerability in the websiteid parameter of the one-stop government information disclosure system of Beijing Xiangyu...

SQL Injection Vulnerability in the id Parameter of a Government System Developed by Beijing Xiangyu Leader Software Co.

Ltd. is a high-tech enterprise dedicated to the research and development of office software for e-government applications and market development. A SQL injection vulnerability exists in the id parameter of the government system developed by Beijing Xiangyu Leader Software Co., Ltd. which allows...

CVE-2015-3931 Microsec e-Szigno, CVE-2015-3932 Netlock Mokka XSW vulnerability

In November 2014, SEARCH-LAB Ltd. discovered a security vulnerability in Microsec e-Szigno, and Netlock Mokka computer applications that are used to generate and validate digital signatures, which are applied within the official Hungarian government processes. The vulnerability affected the...

Class-Action Suit Alleges OPM Officials Failed to Protect Employees' Data

A class-action lawsuit filed by a government employees’ union against the Office of Personnel Management as a result of the massive data breach at OPM that affects more than 18 million people alleges that not only did the agency know about vulnerabilities in its network long before the attack, bu...

In Wake of New Vulnerability OPM Temporarily Halts Background Checks

The Office of Personnel Management — already deep in the throes of a breach that may implicate upwards to 18 million government employees — announced yesterday that it is temporarily suspending the system it uses to conduct government background checks. According to the OPM, the shuttering of the...

某政府网上审批系统通用SQL注入7处打包

简要描述： 详细说明： 某政府网上审批系统通用SQL注入7处打包。 7处注入案例： http://.../workplate/base/org/WebUserList.aspx?id=99 http://.../workplate/base/org/WebUserList.aspx?id=99 http://.../workplate/base/org/WebUserList.aspx?id=99 http://.../workplate/base/org/WebUserList.aspx?id=99...

某政务系统一处通用SQL注入漏洞

简要描述： 详细说明： 某政务系统一处通用SQL注入漏洞。 案例： http://.../workplate/base/user/multisel.aspx http://...:8001/workplate//base/user/multisel.aspx ...:81/workplate//base/user/multisel.aspx ...:82/workplate//base/user/multisel.aspx ...:88/workplate//base/user/multisel.aspx...

Stolen U.S. Government Credentials Found Online

Credentials stolen in breaches and sundry hacks belonging to close to 100 unique U.S. government domains are scattered among a number of paste sites and are searchable in other locations online. Analysts at Recorded Future said on Wednesday that through open source intelligence gathering and...

WhatsApp Ranked Worst at Protecting Your Privacy and Data

The Electronic Frontier Foundation has released its annual report card of tech companies for 2015 based upon how much they keep your personal data secure from government snoops. And the Worst Companies Award goes to… 1. At&T 2. WhatsApp 3. Verizon Yes, you heard right! WhatsApp is one of the thre...

Major Carriers AT&T, Comcast Continue to Lag in EFF Privacy Report

While many companies have made strides when it comes to how they handle transparency and government requests post-Snowden, major telecoms such as AT&T and Verizon continue to lag behind. Despite publishing transparency reports within the last year, the two companies scored the lowest on the...

某政府在用系统存在通用SQL注入

简要描述： rt 详细说明： 某政府在用系统存在通用SQL注入。 案例： http://218.56.40.229:8037//newsymItemView/Item2.aspx?id=021973 http://123.134.189.60:8022//newsymItemView/Item2.aspx?id=021973 http://222.135.109.70:8200//newsymItemView/Item2.aspx?id=021973 http://218.56.99.84:8003//newsymItemView/Item2.aspx?id=021973...

Congress Looking Into Restricting Power of Government-Owned CAs

UPDATE–As the debate over potential government interference with encryption technologies rages in countries around the world, Congress is now going down a different path, asking technology companies whether it’s feasible and potentially effective for certificate authorities to restricting the way...

Apple Pushing Developers Toward HTTPS Connections in Apps

Apple is encouraging developers who create apps for iOS to begin moving their apps to an HTTPS-only model as soon as possible in an effort to thwart eavesdropping on insecure, plaintext HTTP connections. The move is yet one more sign that major Internet and technology companies are becoming ever...

Federal Agencies to Move to HTTPS-Only Connections

Following the lead of many major Web services, the White House on Monday announced that it would move all of the federal government’s public sites and services to HTTPS-only. Tony Scott, the federal CIO, has issued a memorandum to all federal agencies and departments instructing them to move all ...

Wassenaar, Bug Bounties and Vulnerability Rewards Programs

Bug bounties have gone from novelty to necessity, not only for enterprises looking to take advantage of the skills of an organized pool of vulnerability hunters, but also for a slew of independent researchers who make a living contributing to various vendor and independent bounty and reward...

Rights Groups Call for More Change Two Years After Snowden Revelations Began

It’s been two years now since the first stories about NSA surveillance capabilities began to appear, and the environment has shifted dramatically in that time. Awareness of and resistance to mass surveillance has increased greatly, but the changes to policy and laws that many observers had hoped...

某政府在用系统通用型SQL注入#10

简要描述： rt 详细说明： 某政府在用系统通用型SQL注入10。 案例如下： http://221.2.149.28:8090/lslp/WHOut/DistrictIndexSc.aspx?DFID=JQ http://www.rcsp.cn:8083/lslp/WHOut/DistrictIndexSc.aspx?DFID=JQ http://222.135.78.34:8083/lslp/WHOut/DistrictIndexSc.aspx?DFID=JQ...