bind: delegation handling denial of service

A denial of service flaw was found in the way BIND followed DNS delegations. A remote attacker could use a specially crafted zone containing a large number of referrals which, when looked up and processed, would cause named to use excessive amounts of memory or crash...

Apple Mac OSX / iOS - Unsandboxable Kernel Use-After-Free in Mach Vouchers

Exploit for multiple platform in category dos / poc / Source: https://code.google.com/p/google-security-research/issues/detail?id=553 The mach voucher subsystem fails to correctly handle spoofed no-more-senders messages. ipckobjectserver will be called for mach messages sent to kernel-owned mach...

SOL53445000 - BIND vulnerability CVE-2015-8704

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

PT-2016-3622

Name of the Vulnerable Software and Affected Versions OpenCart versions prior to 2.1.0.2 Description The issue allows remote attackers to inject arbitrary web script or HTML via the zone id parameter to "index.php". This can lead to cross-site scripting XSS attacks. Recommendations For versions...

AccessDiver 4.301 - Buffer Overflow

Exploit for windows platform in category dos / poc + Credits: hyp3rlinx Vendor: ============== M. Jean Fages www.accessdiver.com circa 1998-2006 Product: ============================= AccessDiver V4.301 build 5888 AccessDiver is a security tester for Web pages. It has got a set of tools which wil...

AccessDiver 4.301 Build 5888 Buffer Overflow

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ACCESSDIVER-BUFFER-OVERFLOW.txt Vendor: ============== M. Jean Fages www.accessdiver.com circa 1998-2006 Product: ============================= AccessDiver V4.301 build 5888 AccessDiver is...

AccessDiver 4.301 - Buffer Overflow

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ACCESSDIVER-BUFFER-OVERFLOW.txt Vendor: ============== M. Jean Fages www.accessdiver.com circa 1998-2006 Product: ============================= AccessDiver V4.301 build 5888 AccessDiver is...

Knot DNS < 1.6.3 Multiple Vulnerabilities

The remote host is running a version of Knot DNS prior to 1.6.3. It is, therefore, affected by multiple vulnerabilities : - An out-of-bounds read error exists in the knotrrsetrrtocanonical function. An unauthenticated, remote attacker can exploit this, via a specially crafted packet, to disclose...

Article Script 1.00 SQL Injection

Exploit Title : Article Script SQL Injection Vulnerability Exploit Author : Linux Zone Research Team Vendor Homepage: http://articlesetup.com/ Google Dork : inurl:/article.php?id= intext:Powered By Article Marketing Software Link : http://www.ArticleSetup.com/downloads/ArticleSetup-Latest.zip Dat...

WordPress Tierra Billboard Manager 1.14 SQL Injection

Exploit Title : Wordpress Plugin Tierra Billboard Manager SQL Injection Vulnerability Exploit Author : Linux Zone Research Team Date : 14-December-2015 Vendor Homepage: https://wordpress.org Software Link : https://wordpress.org/plugins/tierra-billboard-manager/ Version : 1.14 Tested on : Linux -...

How to Set the Time Zone of the NetScaler Appliance to UTC Time Zone

This article contains the procedure to change the time zone of the NetScaler appliance to Coordinated Universal Time UTC if the appliance is set to another time zone. When setting the appliance to the UTC time zone, it can be confusing to refer to a relevant city. To avoid such uncertainty, you c...

sudo: unsafe handling of TZ environment variable

It was discovered that sudo did not perform any checks of the TZ environment variable value. If sudo was configured to preserve the TZ environment variable, a local user with privileges to execute commands via sudo could possibly use this flaw to achieve system state changes not permitted by the...

Bluto - DNS Recon, DNS Zone Transfer, and Email Enumeration

BLUTO DNS recon | Brute forcer | DNS Zone Transfer | Email Enumeration The target domain is queried for MX and NS records. Sub-domains are passively gathered via NetCraft. The target domain NS records are each queried for potential Zone Transfers. If none of them gives up their spinach, Bluto wil...

NXFilter 3.0.3 - CSRF Vulnerabilities

Exploit for jsp platform in category web applications Vendor: ================================ www.nxfilter.org/p2/ Product: ================================ NXFilter v3.0.3 Vulnerability Type: ================================= Cross site request forgery - CSRF Vulnerability Details:...

BIND: Denial of service

Background BIND Berkeley Internet Name Domain is a Name Server. Description A vulnerability has been discovered in BIND’s named utility leading to a Denial of Service condition. Impact A remote attacker may be able to cause Denial of Service condition via specially constructed zone data. Workarou...

DEBIAN-CVE-2015-5722

buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service assertion failure and daemon exit by creating a zone containing a malformed DNSSEC key and issuing a query for a name in that zone...

USN-2728-1 bind9 vulnerability

Hanno Böck discovered that Bind incorrectly handled certain malformed keys when configured to perform DNSSEC validation. A remote attacker could use this issue with specially crafted zone data to cause Bind to crash, resulting in a denial of service...

UBUNTU-CVE-2015-5722

buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service assertion failure and daemon exit by creating a zone containing a malformed DNSSEC key and issuing a query for a name in that zone...

CVE-2015-4029

Cross-site scripting XSS vulnerability in the WebGUI in pfSense before 2.2.3 allows remote attackers to inject arbitrary web script or HTML via the zone parameter in a del action to servicescaptiveportalzones.php...

PT-2015-6391

Name of the Vulnerable Software and Affected Versions pfSense versions prior to 2.2.3 Description A cross-site scripting XSS issue exists in the WebGUI, allowing remote attackers to inject arbitrary web script or HTML via the zone parameter in a del action to "services captiveportal zones.php" AP...