某政府信息公开系统存在SQL注入

简要描述： RT 详细说明： 吉大正元信息技术股份有限公司:http://www.jit.com.cn/ 众多政府网站都在使用该系统 我就用5个案例来测试。 注入链接是： /zwdtSjgl/infoDetail.jsp?id= 案例： http://www.ilj.gov.cn/zwdtSjgl/infoDetail.jsp?id=461 http://218.62.81.171/zwdtSjgl/infoDetail.jsp?id=461 http://218.62.100.33:8000/zwdtSjgl/infoDetail.jsp?id=146...

某政府信息公开系统存在SQL注入

简要描述： RT 详细说明： 吉大正元信息技术股份有限公司:http://www.jit.com.cn/ 众多政府网站都在使用该系统 我就用5个案例来测试。 注入链接是： /zwdtSjgl/infoIndex.jsp?channelCid= 案例： http://218.27.207.22/zwdtSjgl/infoIndex.jsp?channelCid=6 http://218.27.190.107:8080/zwdtSjgl/infoIndex.jsp?channelCid=9...

某政府信息公开系统存在SQL注入

简要描述： RT 详细说明： 吉大正元信息技术股份有限公司:http://www.jit.com.cn/ 众多政府网站都在使用该系统。 我就用5个案例来测试。 注入链接是： /zwdtSjgl/Manual/Manual.jsp?depid= 案例： http://218.27.140.5/zwdtSjgl/Manual/Manual.jsp?depid=013524006 http://218.62.100.33:8000/zwdtSjgl/Manual/Manual.jsp?depid=01361537-0...

某政府信息公开系统存在SQL注入

简要描述： RT 详细说明： 吉大正元信息技术股份有限公司:http://www.jit.com.cn/ 众多政府网站都在使用该系统 我就用5个案例来测试。 注入链接是： /zwdtSjgl/Directory/showNsjg.jsp?NsjgId= 案例： http://122.143.239.70:8090/zwdtSjgl/Directory/showNsjg.jsp?NsjgId=1736 http://222.160.175.90/zwdtSjgl/Directory/showNsjg.jsp?NsjgId=1769...

某政府信息公开系统存在SQL注入

简要描述： RT 详细说明： 吉大正元信息技术股份有限公司:http://www.jit.com.cn/ 众多政府网站都在使用该系统 我就用5个案例来测试。 注入链接是： /zwdtSjgl/Directory/showLeader.jsp?LeadId= 漏洞证明： 案例一： http://218.27.190.107:8080/zwdtSjgl/Directory/showLeader.jsp?LeadId=2986 案例二： http://122.143.239.70:8090/zwdtSjgl/Directory/showLeader.jsp?LeadId=3261 案例三：...

The SS7 network to save significant vulnerability that everyone can monitor mobile phones-vulnerability warning-the black bar safety net

Recently, German researchers found that the mobile security vulnerabilities these vulnerabilities enable hackers, spies and criminals take advantage of, you can large-scale wiretapping of private telephone and steal a mobile phone short message, even if the mobile phone network using the current...

Page Source Code Leakage Vulnerability of Time Collaboration Government Affairs Open Portal System

Xi'an Synergy Time Software Co., Ltd SYNSOFT, located in Xi'an Hi-Tech Industrial Development Zone, is a leading middleware product supplier in China, and the most complete integrated middleware series product provider in China. Some pages of Synergy Time government system do not have complete...

某政府信息公开系统存在SQL注入

简要描述： RT 详细说明： 吉大正元信息技术股份有限公司:http://www.jit.com.cn/ 众多政府网站都在使用该系统。 我就用5个案例来测试。 注入链接是： /zwdtSjgl/Directory/iframeAgencyFunctions.jsp?departmentno= 案例： http://218.27.207.22/zwdtSjgl/Directory/iframeAgencyFunctions.jsp?departmentno=1...

FBI Officially Blames North Korea in Sony Hacks

The FBI announced today that it has gathered enough evidence to say with certainty that the government of the Democratic People’s Republic of Korea is in fact responsible for recent intrusions into the networks of Sony Pictures Entertainment SPE. This fact was all but officially stated yesterday...

US Government: North Korea Behind Sony Hack

The United States government is expected to attribute the damaging and embarrassing hack of Sony Pictures Entertainment to the government of North Korea. Various mainstream media outlets quoting anonymous government sources said North Korea is “centrally involved” in the attack, which NBC News sa...

Anonymous Hacks Swedish Government in Revenge for 'Pirate Bay' Takedown

An online "hacktivist" group that calls itself Anonymous has claimed responsibility for hacking into email accounts of Swedish government in response to the seizure of world renowned The Pirate Bay website and server by Swedish police last week. Apart from Sweden government officials, the Anonymo...

OHOCMS exposed 0day vulnerabilities-government system faced a serious threat-vulnerability warning-the black bar safety net

Recently, the Ann constant information security researcher found that the current in the domestic government, education, public security, healthcare and other sectors using a very high rate of government system“OHOCMS”multiple vulnerabilities, including arbitrary file upload, arbitrary file...

某Gov行政中心系统Oracle注入漏洞(使用量大)

简要描述： 其涉及全国各省行政服务中心，案例不比大汉jcms少 详细说明： 看这里。。。 接上一弹 WooYun: 某大型政府服务系统Oracle注入使用量大 所有涉及单位为政府政务中心（其涉及全国各省行政服务中心，案例不比大汉jcms少）： 如： http://www.sinanxzfw.gov.cn/ 思南县行政服务中心 http://www.yjxzfw.com.cn/ 印江县行政服务中心 http://www.gygxzw.gov.cn:8066/ 贵阳国家高新区行政服务中心 http://www.tlsp.net/ 铁岭市公共行政服务中心 http://58.42.249.11...

Douran Portal Cross Site Scripting

Exploit Title : DOURAN Portal XSS Vulnerabilities Author : E1.Coders Contact : E1.Coders at Mail dot RU Portal Link : www.DOURAN.com Tested ON : All ver 0f Douran Portal Security Risk : High Description : All target's iranian GOVerment websites DorK : "DOURAN Portal" OR :...

某OA办公系统储存型XSS第二发(demo演示)

简要描述： 涉及大量政府，医院，房产，电视台等网站 详细说明： 这个和 WooYun: 华天动力oa系统多处xss漏洞打包--专业盲打管理员2 这个洞很相似，但是绝对不一样哈，只是相似。。 问题属于过滤不严格，还是在在文档中心，随便点个进去，新建文件夹，名字插入xss代码，构造之前Mosuan大牛插入的代码试试先：alert/3/,保存后发现是没有弹窗的 应该是被过滤了，不怕，然后我们继续构造"/alert/3/再保存看看 可以看到成功弹窗 但是这个时候我们登陆的是普通用户，然后登陆管理员账号看看吧，成功弹窗 img...

Detekt — Free Anti-Malware Tool To Detect Govt. Surveillance Malware

Human rights experts and Privacy International have launched a free tool allowing users to scan their computers for surveillance spyware, typically used by governments and other organizations to spy on human rights activists and journalists around the world. This free-of-charge anti-surveillance...

OnionDuke APT Malware served through Tor Network

The malicious Russian Tor exit node, which was claimed to be patching binary files, is actually distributing a malware program to launch cyber-espionage attacks against European government agencies. The group behind the rogue Tor exit node had likely been infecting files for more than a year,...

Spy Planes Equipped with Dirtbox Devices Collecting Smartphone Data

The U.S. government is reportedly using spy airplanes equipped with special military-grade snooping equipment to eavesdrop on cell phone information from millions of smartphone users in U.S, according to a new report. This little device, nicknamed "Dirtbox", is being used to mimic mobile phone...

Edward Snowden Effect on Privacy Attitudes

Serious concessions have been made about privacy post-Snowden, in particular about how personal information is processed and consumed online. Results from a survey conducted by the Pew Research Center of Washington, D.C., show that the Snowden leaks have raised consumers’ consciousness about not...

Automakers Move to Address Privacy Concerns

Several automakers have agreed on a set of privacy principles that they say will govern the way that they handle personal information generated by vehicles, geolocation data and other sensitive information that is being produced by in-car computers and networks. The principles are the result of...