A Vulnerability Disclosure Program is not just a page on a web site

It’s great to see an increasing number of organisations starting down the path of a Vulnerability Disclosure Program or ‘VDP,’ but it increasingly strikes me that these are ‘check box’ exercises rather than a genuine desire to interact positively with researchers and improve security. A VDP is a...

‘Secure by Design’ & SB-327. Standards for a secure IoT?

The ‘Secure by Design’ guidance for consumer IoT security from the UK's Department for Digital, Culture, Media and Sport DCMS is coming shortly. In the meantime we’ve seen SB-327 from California legislators, mandating some basic security standards for consumer smart tech. Both are big steps...

dcms-social.ru Open Redirect vulnerability

Vulnerable URL: http://dcms-social.ru/go.php?go=aHR0cDovL29wZW5idWdib3VudHkub3Jn Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.11.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 1462778 VIP website status:| No Check...

DCMS 2.4 Cross Site Scripting

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Exploit Title: DCMS v2.4 Cms Cross Site Scripting vulnerability + Exploit Author: Ashiyane Digital Security Team + Home : www.Ashiyane.org + Vendor Homepage: www.dibagroup.com + Category: Web Application +...

DCMS (SC.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================= DCMS SC.php SQL Injection Vulnerability ========================================= Exploit Title: DCMS SC.php SQL Injection Vulnerability Date: 01.07.2010 Author: Dark.Man email protected Thanks To:...