DLA-23-1 nss - security update

Bulletin has no description...

DSA-2994-1 nss - security update

Bulletin has no description...

UBUNTU-CVE-2014-1345

WebKit in Apple iOS before 7.1.2 and Apple Safari before 6.1.5 and 7.x before 7.0.5 does not properly encode domain names in URLs, which allows remote attackers to spoof the address bar via a crafted web site...

看我如何拿下youyax域名的（域名安全短板）

简要描述： youyax总是出现在评论里，不幸的是被我这个屌丝看到了- - 必须弹JJ弹到死 详细说明： youyax.com 非常简洁 网站包含了一个论坛+一个wp博客，基本除了爆破也没什么的。。 好的，看到了吧，我们已经被程序员逼在死路了，如同一个胡同一样，看到不到蔚蓝的天空 我很纠结，难道这样就灰暗了吗 很不幸，站长太活跃。。 在某爱数据库出现了他的帐号密码 QQ邮箱 密码为：1b 然后我又开始摸索，他有优酷，然后啪啪啪登录进去了。。。 尝试用那个登录他的wp后台也无果。。。 唉，又堵住了，对了，他不是有163吗，我们试试 [email protected]...

Restaurant Listing with Online Ordering SQL Injection Vulnerability

No description provided by source. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ 0 0 \ \ /\ /\ \ \ \ /\ \ \ /\ /\ \ \ \ \ \ \ / 1 1 \ \ \ \\ \ \ /\ \...

Microsoft Message Queueing Service DNS Name Path Overflow

No description provided by source. $Id: ms07065msmq.rb 9929 2010-07-25 21:37:54Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

reSIProcate 1.3.2 - Remote Denial of Service PoC

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote DoS in reSIProcate MU-200807-01 July 10, 2008 http://labs.mudynamics.com/advisories.html Affected Products/Versions: repro SIP proxy/registrar 1.3.2 http://www.resiprocate.org/ReSIProcate1.3.2Release Any produ...

openSUSE Security Update : bind (openSUSE-SU-2012:0863-1)

Fixed domain name resolving flaw: CVE-2012-1033, bnc746074 Non-security fixes : - more than 40 other bugs fixed see CHANGES for details - 9.7.6-P1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Upda...

openSUSE Security Update : seamonkey (openSUSE-SU-2014:0629-1)

This is a SeaMonkey update to version 2.26 : - MFSA 2014-34/CVE-2014-1518/CVE-2014-1519 Miscellaneous memory safety hazards - MFSA 2014-36/CVE-2014-1522 bmo995289 Web Audio memory corruption issues - MFSA 2014-37/CVE-2014-1523 bmo969226 Out of bounds read while decoding JPG images - MFSA...

openSUSE Security Update : bind (openSUSE-SU-2012:0864-1)

Fixed domain name resolving flaw: CVE-2012-1033, bnc746074 Non-security fixes : - added TLSA record type - added wire format lookup method to sdb - many many bugfixes see CHANGES for details - 9.8.3-P1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

OpenJDK: missing randomization of JNDI DNS client query IDs (JNDI, 8030731)

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI...

DEBIAN-CVE-2014-0239

The internal DNS server in Samba 4.x before 4.0.18 does not check the QR field in the header section of an incoming DNS message before sending a response, which allows remote attackers to cause a denial of service CPU and bandwidth consumption via a forged response packet that triggers a...

DEBIAN-CVE-2013-0289

Isync 0.4 before 1.0.6, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

OpenJDK: missing randomization of JNDI DNS client query IDs (JNDI, 8030731)

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI...

OpenJDK: missing randomization of JNDI DNS client query IDs (JNDI, 8030731)

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI...

SuSE 11.3 Security Update : Mozilla Firefox (SAT Patch Number 9185)

This Mozilla Firefox and Mozilla NSS update to 24.5.0esr fixes the following several security and non-security issues : - Miscellaneous memory safety hazards. MFSA 2014-34 / CVE-2014-1518 - Out of bounds read while decoding JPG images. MFSA 2014-37 / CVE-2014-1523 - Buffer overflow when using...

Fedora Update for ndjbdns FEDORA-2014-5471

Check for the Version of ndjbdns OpenVAS Vulnerability Test Fedora Update for ndjbdns FEDORA-2014-5471 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 19 Update: ndjbdns-1.06-1.fc19

New djbdns: is a usable fork of djbdns. djbdns' is a Domain Name System originally written by the eminent author of Qmail, Dr D. J. Bernstein. This new version of djbdns is a complete makeover to the original sourcedjbdns-1.05 and is meant to make life a lot more pleasant. The notable changes so...

Incorrect IDNA domain name matching for wildcard certificates — Mozilla

Security researcher Christian Heimes reported that the Network Security Services NSS library does not handle IDNA domain prefixes according to RFC 6125 for wildcard certificates. This leads to improper wildcard matching of domains when they should not be matched in compliance with the...

DEBIAN-CVE-2014-0350

The Poco::Net::X509Certificate::verify method in the NetSSL library in POCO C++ Libraries before 1.4.6p4 allows man-in-the-middle attackers to spoof SSL servers via crafted DNS PTR records that are requested during comparison of a server name to a wildcard domain name in an X.509 certificate...