PowerDNS Authoritative Server 代码注入漏洞

The PowerDNS Authoritative Server is a DNS server developed by the Dutch company PowerDNS. There is a code injection vulnerability in the PowerDNS Authoritative Server. This vulnerability allows attackers to send notification requests, resulting in new auxiliary domains being added to the bind...

CVE-2015-1128: Exposure of Sensitive Information to an Unauthorized Actor

The private-browsing implementation in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 allows attackers to obtain sensitive browsing-history information via vectors involving push-notification requests...

PT-2015-5112

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 6.2.5 Apple Safari versions 7.x prior to 7.1.5 Apple Safari versions 8.x prior to 8.0.5 Description The issue affects the private-browsing implementation, allowing attackers to obtain sensitive browsing-history...

Symantec Altiris DS SQL Injection Vulnerability

Usage Info This module exploits a SQL injection flaw in Symantec Altiris Deployment Solution 6.8 to 6.9.164. The vulnerability exists on axengine.exe which fails to adequately sanitize numeric input fields in "UpdateComputer" notification Requests. In order to spawn a shell, several SQL injection...