某政府系统一处SQL注入

简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 案例如下： http://61.133.119.187:8091/symItemView/ItemFourth.aspx?id=1 http://222.135.76.147:8200/symItemView/ItemFourth.aspx?id=1 http://222.135.127.190:7200/symItemView/ItemFourth.aspx?id=1 http://221.2.149.47:8200/symItemView/ItemFourth.aspx?id=1...

某gov在用行政服务系统某处SQL注入(Oracle数据库)

简要描述： RT 详细说明： 其他注入点，如： WooYun: 某大型政府服务系统Oracle注入使用量大 WooYun: 某Gov行政中心系统Oracle注入漏洞使用量大 WooYun: 某gov行政服务系统Oracle数据库搜索型POST注入 这处注入出在：lawquery.do?lawID=0006&method=queryDetailLaw lasID存在注入 目前wooyun上还没人提交，如图搜索结果： 按照通用程序标准（案例+演示），部分案例如下：...

Facebook Transparency Report: Government Requests Down

Facebook today reported a slight drop in government requests for user data, bucking a trend that peaked during the first half of 2014 with the highest numbers the company had seen. Its latest transparency report covers the second half of last year, and shows slight dips in requests for user data,...

某gov行政服务系统Oracle数据库搜索型POST注入

简要描述： RT 详细说明： 排除该套系统其它注入点： WooYun: 某大型政府服务系统Oracle注入使用量大 WooYun: 某Gov行政中心系统Oracle注入漏洞使用量大 此处是一个POST注入，存在注入地方：spjggsQuery.do?method=busiinfoquery POST参数id存在注入 wooyun还没人提交，抢先。。如图： 按照通用程序标准（十个以上案例+演示），部分案例如下： http://119.1.108.246/spjggsQuery.do?method=busiinfoquery...

某政府信息公开系统存在SQL注入

简要描述： RT 详细说明： 吉大正元信息技术股份有限公司:http://www.jit.com.cn/ 众多政府网站都在使用该系统 我就用多个案例来测试。 注入链接是： searchTypeDir.jsp?departmentid= 案例： http://222.160.140.29:8000/zwdtSjgl/Directory/searchTypeDir.jsp?departmentid=DE200804031229450156&departmentname=市民族事务委员会&departmentType=1&title1code=12&typeDirName=年度政府信息公开工作...

CASPER Surveillance Malware Linked to French Government

Last month, cyber security researchers spotted a new strain of french surveillance malware, dubbed "Babar," which revealed that even French Government and its spying agency the General Directorate for External Security DGSE is dedicatedly involved in conducting surveillance operation just like th...

Komodia Certificate Manipulation Enabled Man-In-The-Middle Attacks

The shoddy state of SSL certificate validation on the Internet again floated to the surface, this time by the Superfish mess, which continues to get worse. The Electronic Frontier Foundation on Wednesday released a report based on data scoured from the Decentralized SSL Observatory which it...

‘DarkLeaks’ Black Market — Anonymously Selling Secrets for Bitcoins

An all new anonymous online underground black market website, DarkLeaks, has been introduced on the Internet where Whistleblowers, blackmailers, hackers and any individual can trade/sell sensitive and valuable data/secrets anonymously in exchange for Bitcoin payments. DarkLeaks is a decentralized...

Securing DNS Essential to Web's Future, Dan Kaminsky

CANCUN – “2015 got weird… really weird.” Those were some of the first words spoken by Dan Kaminsky in his talk today at the Kaspersky Security Analyst Summit Monday. He was referring to a few key events from the last several weeks: the Sony hack debacle, or what he called “North Korean or...

Obama's Executive Order urges Companies to Share CyberSecurity Threat Data

President Barack Obama signed an executive order on Friday that encourages and promotes sharing of information on cybersecurity threats within the private sector and between the private sector companies and the government agencies as well. AREAS TO IMPROVE During his speech at the White House...

eYou mail system The message body stored XSS（HTML5 features and need to click on the-vulnerability warning-the black bar safety net

Since eyou version number is different, the following test code The effect is a subtle distinction, but the presence of the vulnerability causes of the same. Test code: !-- if trueimg onerror=alert1 src=--form action=javascript:alert2input type=submitinput autofocus onfocus=alert3select autofocus...

New Cyber Threat Center May Face Challenges

In the wake of news-making attacks on Sony Pictures, Home Depot and many others, the federal government is establishing a new information integration center to focus on cyber threats. The center will analyze intelligence contributed by several agencies, along with the private sector, a model that...

Markey Car Security Report Just the Start for Automakers

This may come as a surprise to one of you, but it turns out that computers and, by extension, things that contain computers, are vulnerable to attackers. That includes cars, something that the United States government has now discovered, and Sen. Edward Markey is now warning consumers that...

Government Requests for Twitter User Data Continue to Grow

The appetite for Twitter user data from governments around the world continues to grow, with the volume of such requests increasing by 40 percent in the second half of 2014. Requests from the United States government alone went up 29 percent, the company said in its latest transparency report...

Cheezburgers, Warrant Canaries and Cat Memes

Surveillance, privacy and security are serious subjects. So too, for some people, are cat memes and GIFs of screaming goats. And Cheezburger Inc., the premier purveyor of said memes and GIFs, wants its users to know that the company is standing up for their rights. The folks at Cheezburger have...

某政府系统#四处注入打包

简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 第一处: 案例如下: http://61.133.119.187:8091/ckq/pllistOut.aspx?tname=%E8%A5%BF%E8%8B%91%E5%8A%9E%E4%BA%8B%E5%A4%84&CountryName=%E8%92%BF%E6%B3%8A%E7%A4%BE%E5%8C%BA...

某政府系统一处通用SQL注入漏洞

简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 案例如下： http://222.135.109.70:8100/wendengview.aspx?deptid=54&atid=291 http://61.133.119.187:8089/wendengview.aspx?deptid=54&atid=291 http://222.135.127.190:7000/wendengview.aspx?deptid=54&atid=291...

某政府系统通用SQL注入漏洞一处

简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 案例如下: http://222.135.127.190:7000/Swgk/Default.aspx?st=1&deptid=52 http://221.2.171.59:8000/Swgk/Default.aspx?st=1&deptid=52 http://222.135.109.70:8100/Swgk/Default.aspx?st=1&deptid=52 http://61.133.119.187:8089/Swgk/Default.aspx?st=1&deptid=52...

某政府系统#在一处通用SQL注入漏洞

简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 案例如下： http://221.2.171.59:8000/rushanview.aspx?id=288&newsid=1299&deptid=55 http://222.135.127.190:7000/rushanview.aspx?id=288&newsid=1299&deptid=55 http://221.2.149.47:8100/rushanview.aspx?id=288&newsid=1299&deptid=55...

U.S. Officials Say Chinese Cyberespionage 'Needs to Stop'

The top cybersecurity officials in the United States on Wednesday said that China is harming the potential for an open Internet through its policies of censorship, and also said the country’s continued cyberespionage operations are damaging the two countries’ relationship. In a piece co-authored ...