Government Demands for Verizon Customer Data Drop

The number of subpoenas, total orders and warrants that the United States government delivered to Verizon all dropped in the second half of 2014, according to the company’s latest transparency report. The giant telecom provider released data on Thursday that showed a decrease in subpoenas of abou...

Phone to grab votes APP“train up”to the presence of high-risk vulnerabilities in the user's personal information and other data leaks-bug warning-the black bar safety net

Data 3 6 0 patch-day vulnerability response platform shows that the domestic popular mobile phone to grab votes APP“train up”to the presence of high-risk vulnerabilities, including millions of tickets, ticket orders user ID number, username, plaintext password, detailed ticket information and oth...

phpyun v3.2 (20141222) 三处注入

简要描述： 20141222 详细说明： 第一处在 api/alipay/alipayto.php 现在的少了以前的验证。 errorreporting0; requireonce"alipayconfig.php"; requireonce"class/alipayservice.php"; requireoncedirnamedirnamedirnameFILE."/data/db.config.php"; requireoncedirnamedirnamedirnameFILE."/plus/config.php";...

cmseasy设计逻辑缺陷可以不花钱买东西

简要描述： cmseasy设计逻辑缺陷可以不花钱买东西 详细说明： archiveact.php: function ordersaction $this-view-aid = trimfront::get'aid'; if front::post'submit' $this-orders = new orders; $row = $this-orders-getrow"","adddate DESC"; //vardumptime; if$row'adddate' && time - $row'adddate' view-user'userid' ?...

Government Requests for Facebook User Data Increasing

Facebook’s latest transparency report shows that U.S law enforcement agencies issued a greater number of total requests for user data related to criminal investigations in the first six months of 2014 than they have over any previous such period. This report, per Justice Department reporting...

AOL Releases Transparency Report Lobbies for USA FREEDOM Act

Noting that Saturday was the 13th anniversary of the passage of the USA PATRIOT Act, the Web giant AOL this week released its latest transparency report, detailing estimations of how many Foreign Intelligence Surveillance Act FISA orders and National Security Letters NSLs it’s received in the las...

cmseasy 最新版补丁绕过sql注入（绕过360waf）

简要描述： 继续绕啊绕啊 详细说明： 首先还是老地方：archiveact.php611行） function respondaction includeonce ROOT . '/lib/plugins/pay/' . front::$get'code' . '.php'; $payclassname = front::$get'code'; $payobj = new $payclassname; $uri = $SERVER"REQUESTURI"; $uriget = strstr$uri, '?'; $uriget = strreplace'?', '', $uriget;...

National Security Letters Challenged in Ninth Circuit Court

In the Ninth Circuit Court in San Francisco Wednesday morning, the Electronic Frontier Foundation’s EFF Kurt Opsahl urged the federal appeals court to uphold a lower court’s ruling that national security letters NSLs are unconstitutional. Regardless whether the ruling is upheld, the matter of NSL...

Dropbox Reports 80 Percent of Subpoenas Contain Gag Request

Most U.S. government subpoenas for data on Dropbox users are accompanied with a request not to inform the user in question. Dropbox legal counsel Bart Volkmer said those gag orders are repelled unless there is a valid court order. The revelation accompanied the release of the cloud storage...

Microsoft Exec Says Company Has Never Been Asked to Backdoor a Product

One of Microsoft’s top security executives said the company has never been asked by the United States government to build a backdoor into any of its products, and if the company was asked, it would fight the order in the courts. Since the Edward Snowden revelations began last summer, there have...

Shopping Cart Script with Affiliate Program SQL Injection

No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Shopping Cart Script with Affiliate Program SQL Injection Vendor url:http://www.yourfreeworld.com Version:n/a Price:399$ Published: 2010-06-19 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue,...

Joomla! DM Orders Component 'id' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/37655/info The DM Orders component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Of TrueCrypt and the Warrant Canary

Apple’s first transparency report, released last November, was one in a string of many released following the start of the Snowden leaks by technology companies trying to distance themselves from the tentacles of NSA surveillance. Apple’s report, however, contained two sentences that made it stan...

StopTheHacker: CSRF - Disabling orders at https://panel.stopthehacker.com/manage/disable-order/order/ID

Hi there, there's a CSRF which would allow an attacker to disable an order. Host: https://panel.stopthehacker.com Steps to reproduce: - 1. Login to the panel. - 2. Subscribe/order a new scan - 3. Go to the Billing page and get the order ID - 4. Put the order id in the PoC below and submit it - 5...

Time Warner Cable Publishes First Transparency Report

Time Warner Cable has joined a half-dozen telecommunications and technology companies that, in the past six months, have published their first transparency report on government and law enforcement requests for user data and content. Since the Edward Snowden leaks began last June, transparency...

Comcast Transparency Report

Another day, another transparency report from a company trying to put some distance between itself and the United States’ broad surveillance apparatus. Today’s report comes from Comcast, the largest Internet service provider in the U.S., who “takes customer privacy very seriously, and holds it in...

CloudFlare Issues Transparency Report

CloudFlare claims government requests for user data are affecting fewer than .017 percent of their two million global customers The Web performance and security company yesterday issued the report in accordance with the Department of Justice’s new regulations for publishing information pertaining...

Twitter Transparency Report January 2014 Released

Color Twitter unimpressed with the Justice Department ruling that eased a gag order on technology companies and service providers with regard to the reporting of FISA orders and National Security Letters. Twitter released a transparency report today on government and law enforcement requests for...

Gag Order Eased on NSA surveillance Transparency Reporting

A gag order has been eased that prevented technology and telecommunications companies from reporting requests for customer data made under the Foreign Intelligence Surveillance Act FISA. The move comes on the heels of announced surveillance reforms by President Obama on Jan. 17. Obama, during an...

Verizon Releases First Transparency Report, Says Government Requests INcreasing

After months of public calls from privacy advocates and security experts, Verizon on Wednesday released its first transparency report, revealing that it received more than 164,000 subpoenas and between 1,000 and 2,000 National Security Letters in 2013. The report, which covers Verizon’s landline,...