pitzenberg.ooe.gv.at XSS vulnerability

Vulnerable URL: http://www.pitzenberg.ooe.gv.at/system/web/suche.aspx?search='-confirmopenbugbounty-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

aguai.sp.gov.br XSS vulnerability

Vulnerable URL: http://www.aguai.sp.gov.br/home/noticias.php?id=566%27%27%27%27=%27%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 14:07 GMT Vulnerability type:| XSS Vulnerability status:|...

nwtdiscoveryportal.enr.gov.nt.ca XSS vulnerability

Vulnerable URL: http://nwtdiscoveryportal.enr.gov.nt.ca/geoportal/catalog/search/resource/review.page?uuid=%22-alert/OPENBUGBOUNTY/-%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

JCMS政府信息公开系统在/lm/front/reg_2.jsp存在本地文件包含漏洞

No description provided by source...

egov1.santos.sp.gov.br XSS vulnerability

Vulnerable URL: https://egov1.santos.sp.gov.br/cgi-bin/do0104/ksearch.cgi?terms=d=Nome+de+Arquivo=5%22%3E%3Csvg/onload=alert%28/xssposed/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 09:55 GMT Vulnerability type:| XSS Vulnerability...

jacksoncountygov.com Open Redirect vulnerability

Vulnerable URL: http://www.jacksoncountygov.com/redirect.aspx?url=https://www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:21 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 100893...

contests.npcnewsonline.com XSS vulnerability

Vulnerable URL: http://contests.npcnewsonline.com/images.php?image=219129=2013%20NPC%20Gov.%20Cup=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

gobiernobogota.gov.co XSS vulnerability

Vulnerable URL: http://www.gobiernobogota.gov.co/es/prensa-y-comunicaciones/noticias-e-informativos/2497--la-secretaria-distrital-de-gobierno-realiza-exitoso-cierre-de-convenio-interinstitucional-sobre-el-proyecto-de-apoyo-al-emprendimiento-de-los-desmovilizados-y-sus-familias? Details:...

culture.soboba-nsn.gov XSS vulnerability

Vulnerable URL: http://culture.soboba-nsn.gov/2011-11-21-18-54-04?Guitch404 Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:42 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...

dnr.louisiana.gov Open Redirect vulnerability

Open Bug Bounty ID: OBB-84945 Description| Value ---|--- Affected Website:| dnr.louisiana.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

cidadao.silvajardim.rj.gov.br XSS vulnerability

Open Bug Bounty ID: OBB-55030 Description| Value ---|--- Affected Website:| cidadao.silvajardim.rj.gov.br Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

White House Creates Cyber Governance Unit Within OMB

With the framework explained for a number of government cybersecurity-related initiatives, now it’s time to talk money. The White House anted up strong in 2015 with proposals for a new data breach notification standard, as well as plans to facilitate information-sharing between the public and...

democratic-message-center.senate.gov XSS vulnerability

Open Bug Bounty ID: OBB-47764 Description| Value ---|--- Affected Website:| democratic-message-center.senate.gov Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XS...

easysite内容管理系统某简单粗暴的SQL注入

简要描述： web services是不会骗人的！ 大量gov站点采用了easysite内容管理系统。 详细说明： 1.soap注入 easysite webservice 文件： http://www.py.gov.cn/DesktopModules/CInfo/WebService/CInfoService.asmx 2.ArticleIDs参数存在SQL注入漏洞 随便找个放sqlmap里跑吧 POST /DesktopModules/CInfo/WebService/CInfoService.asmx HTTP/1.1 Host: dynamic.xmedu.gov.cn...

DDoS Attacks originated from thousands of .EDU and .GOV WordPress Blogs

In a recent cyber attack on a Forum site, thousands of outdated legitimate WordPress blogs were abused to perform DDOS attacks using previously known vulnerabilities. After analyzing the Log file from the victim's server, we have noticed many Wordpress CMS based educational .EDU and Government .G...

DDoS Attacks originated from thousands of .EDU and .GOV WordPress Blogs

None...

Spam campaign tricking thousands with shortened .gov URLs

Symantec has reported an increase in spam messages containing .gov URLs. Cybercriminals are using 1.usa.gov links in their spam campaigns to trick users into thinking the links lead to genuine US government Web sites. Spammers have created these shortened URLs through a loophole in the URL...

WhiteHouse Gov Service - Persistent Web Vulnerabilities

Document Title: =============== WhiteHouse Gov Service - Persistent Web Vulnerabilities References: =========== Download: http://www.vulnerability-lab.com/resources/videos/314.wmv View: http://www.youtube.com/watch?v=dsxyQLCPmE Release Date: ============= 2011-11-06 Vulnerability Laboratory ID...

Whitehouse.gov Cross Site Scripting

Title: ====== WhiteHouse Gov Service - Persistent Web Vulnerability Date: ===== 2011-11-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=308 VL-ID: ===== 308 Introduction: ============= http://www.whitehouse.gov/ Abstract: ========= The vulnerability-lab researcher...

Government's Cloud Audit Program Falls Behind Schedule

In a speech on Wednesday, Federal Chief Information Officer Steven VanRoekel said that a federal plan for qualifying and providing security audits on private sector cloud providers will become mandatory for any agency that wanted to contact with third party cloud providers, according to a report ...