White House Executive Order Declares Cyber National Emergency

U.S. President Barack Obama last week issued an Executive Order declaring a national emergency and deputizing the Treasury Secretary and Attorney General to apply sanctions and other consequences for international actors deemed to have engaged in “cyber-enabled activities” detrimental to U.S...

FBI Warns of Phony Sites Offering Government Services

Consumers looking for a replacement Social Security card or government-issued Employer Identification Number EIN are running into a slew of fraudulent search engine results and equally phony websites. The FBI’s Internet Crime Complaint Center today issued an advisory warning that consumer and...

A common system for the presence of SQL injection that involves governments, banks, businesses, and universities-vulnerability warning-the black bar safety net

Zhengzhou source Information Technology Co., Ltd. is a professional engaged in industry application software development, system integration and information security product development and production of high-tech enterprise and software enterprise, the company passed the CMMI3 level certificatio...

IC3 Issues Alert for Fake Government Websites

The Internet Crime Complaint Center IC3 has released an alert that warns consumers of fraudulent government-services websites that mimic legitimate ones. Scam operators lure consumers to these fraudulent websites in order to steal their personal identifiable information PII and collect fees for...

Snapchat Publishes First Transparency Report

Snapchat has released its first transparency report, covering a four-month period from November through February, and the data shows that the company didn’t receive any National Security Letters and got fewer than 400 total requests for data from the United States government. Snapchat, a Californ...

Little Change in Online Behavior Following Snowden Revelations

Some 30 percent of American adults say they have altered their digital behavior in the wake of Edward Snowden’s NSA spying revelations in order to hide information from the government. In Spring 2013, Snowden, a then NSA contractor working for Booz Allen Hamilton, remotely accessed the NSA’s Ft...

DDoS Attack on GitHub Linked to Earlier One Against GreatFire.org

The ongoing DDoS attack on GitHub, which has made the social coding site intermittently unresponsive since March 25, is essentially a side effect of an older operation from the Chinese government against a site run by the anti-censorship project GreatFire.org. Officials at GreatFire said that the...

Anonymous Hackers Threaten Israel with 'Electronic-Holocaust' on 7th April

The famous cyber hacker group Anonymous has vowed an 'Electronic Holocaust' against Israel in response to what the group calls 'crimes in the Palestinian territories'. In a spooky video "message to Israel" posted on YouTube March 4, Anonymous declared yet another cyber attack on April 7, which is...

yemen.gov.ye XSS vulnerability

Open Bug Bounty ID: OBB-57158 Description| Value ---|--- Affected Website:| yemen.gov.ye Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

U.S. Government Requests for Yahoo User Data Drop

Yahoo received nearly 5,000 requests for user data from the United States government in the last six months of 2014 and disclosed some content in nearly 25 percent of those cases. The company said in its new transparency report that it received between 0-999 National Security Letters from the U.S...

某政府系统#注入漏洞一枚

简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 案例如下： http://61.133.119.187:8091/newsymItemManage/Item2.aspx?id=1 http://222.135.76.147:8200/newsymItemManage/Item2.aspx?id=1 http://222.135.127.190:7200/newsymItemManage/Item2.aspx?id=1 http://221.2.149.47:8200/newsymItemManage/Item2.aspx?id=1...

某政府系统一处SQL注入

简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 案例如下： http://61.133.119.187:8091/newsymItemManage/Item5.aspx?id=1 http://222.135.76.147:8200/newsymItemManage/Item5.aspx?id=1 http://222.135.127.190:7200/newsymItemManage/Item5.aspx?id=1 http://221.2.149.47:8200/newsymItemManage/Item5.aspx?id=1...

某政府系统一处SQL注入

简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 案例如下： http://61.133.119.187:8091/newsymItemManage/Item4.aspx?id=1 http://222.135.76.147:8200/newsymItemManage/Item4.aspx?id=1 http://222.135.127.190:7200/newsymItemManage/Item4.aspx?id=1 http://221.2.149.47:8200/newsymItemManage/Item4.aspx?id=1...

某政府系统#注入漏洞一枚

简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 案例如下： http://61.133.119.187:8091/newsymItemManage/Item3.aspx?id=1 http://222.135.76.147:8200/newsymItemManage/Item3.aspx?id=1 http://222.135.127.190:7200/newsymItemManage/Item3.aspx?id=1 http://221.2.149.47:8200/newsymItemManage/Item3.aspx?id=1...

某政府系统#注入漏洞一枚

简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 案例如下： http://61.133.119.187:8091/newsymItemManage/Item1.aspx?id=1 http://222.135.76.147:8200/newsymItemManage/Item1.aspx?id=1 http://222.135.127.190:7200/newsymItemManage/Item1.aspx?id=1 http://221.2.149.47:8200/newsymItemManage/Item1.aspx?id=1...

某通用型政府建站系统SQL注入

简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 案例如下: http://222.135.127.190:7000/gov/SearchInfoSum.aspx?keyword= http://221.2.171.59:8000/gov/SearchInfoSum.aspx?keyword= http://222.135.109.70:8100/gov/SearchInfoSum.aspx?keyword= http://61.133.119.187:8089/gov/SearchInfoSum.aspx?keyword=...

某政府系统一处SQL注入

简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 和这个漏洞 WooYun: 某政府系统一处SQL注入 是同一文件的但是不是同一目录下的注入，不知道算不算重复啊 案例如下： http://61.133.119.187:8091/symItemView/ItemFifth.aspx?id=1 http://222.135.76.147:8200/symItemView/ItemFifth.aspx?id=1 http://222.135.127.190:7200/symItemView/ItemFifth.aspx?id=1...

某政府系统#注入漏洞一枚

简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 案例如下: /symItemManage/ItemForth.aspx?id=11 http://222.135.76.147:8200/symItemManage/ItemForth.aspx?id=11 http://222.135.127.190:7200/symItemManage/ItemForth.aspx?id=11 http://221.2.149.47:8200/symItemManage/ItemForth.aspx?id=11...

某政府系统#注入漏洞一枚

简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 和这个漏洞 WooYun: 某政府系统注入漏洞一枚 是同一文件的但是不是同一目录下的注入，而且，页面内容也不一样，不知道算不算重复啊 案例如下: http://61.133.119.187:8091/symItemView/ItemThird.aspx?id=1 http://222.135.76.147:8200/symItemView/ItemThird.aspx?id=1...

某政府系统两处注入打包

简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 和这个漏洞 WooYun: 某政府系统三处注入打包 是同一文件的但是不是同一目录下的注入，不知道算不算重复啊 第一处： http://61.133.119.187:8091/symItemView/ItemSixth.aspx?id=1 http://222.135.76.147:8200/symItemView/ItemSixth.aspx?id=1 http://222.135.127.190:7200/symItemView/ItemSixth.aspx?id=1...