5661 matches found
Attackers Compromise ICANN, Zone Files System
Unknown hackers were able to compromise vital systems belonging to ICANN, the organization that manages the global top-level domain system, and had access to the system that manages the files with data on resolving specific domain names. The attack apparently took place in November and ICANN...
[SECURITY] [DLA 107-1] unbound security update
Package : unbound Version : 1.4.6-1+squeeze4 CVE ID : CVE-2014-8602 Debian Bug : 772622 Florian Maury from ANSSI discovered that unbound, a validating, recursive, and caching DNS resolver, was prone to a denial of service vulnerability. An attacker crafting a malicious zone and able to emit or ma...
PT-2014-8948
Name of the Vulnerable Software and Affected Versions Guruperl.net Advertise With Pleasure! Professional aka AWP PRO versions 6.6 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the group id parameter in a "list zone" action to...
漫游用友集团各大系统
简要描述： 漫游用友集团各大系统 详细说明： 在一个月黑风高的夜晚，用友某员工的集团办公平台账号，悄悄地泄露了。 // Send message Transport transport=session.getTransport; transport.connect"192.168.210.160" , 25, "ch2","1r"; transport.sendMessagemessage,new Addressnew InternetAddress"[email protected]" ; transport.close;...
Knot DNS 1.5.2 Incremental Zone Transfer (IXFR) DoS
The remote host is running Knot DNS version 1.5.2. It is, therefore, affected by an error that could allow certain Incremental Zone Transfer IXFR messages to crash the server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid78890; scriptversion"1.4"; scriptcvsdate"Dat...
CVE-2014-6473
Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Zone Framework...
Design/Logic Flaw
Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Zone Framework...
Activity stream on JAC contains updates from another user
Jira prompted me to change my time zone, and brought me to a profile that seems to be for a completely different user who happens to share my first name and last initial. See attached screen shot. Going directly to https://secretlocation.atlassian.net/secure/ViewProfile.jspa shows me the proper...
Activity stream on JAC contains updates from another user
Jira prompted me to change my time zone, and brought me to a profile that seems to be for a completely different user who happens to share my first name and last initial. See attached screen shot. Going directly to https://secretlocation.atlassian.net/secure/ViewProfile.jspa shows me the proper...
Activity stream on JAC contains updates from another user
Jira prompted me to change my time zone, and brought me to a profile that seems to be for a completely different user who happens to share my first name and last initial. See attached screen shot. Going directly to https://secretlocation.atlassian.net/secure/ViewProfile.jspa shows me the proper...
CVE-2014-6473
Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Zone Framework...
CVE-2014-6473
CVE-2014-6473 affects Oracle Solaris 10/11 (Zone Framework). The Solaris Zone Framework vulnerability allows a local attacker to achieve arbitrary code execution, potentially taking control of the OS. Affected platforms include Solaris 10 SPARC with branded zones; the vulnerability is discussed i...
PT-2014-7239
Name of the Vulnerable Software and Affected Versions Oracle Sun Solaris versions 10 and 11 Description The issue affects confidentiality, integrity, and availability. It is related to the Zone Framework, but the specific vectors are unknown. Recommendations For Oracle Sun Solaris versions 10 and...
CVE-2014-6473: Undefined Security Weakness
Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Zone Framework...
DNS Reverse Lookup Shellshock
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Security Advisory DNS Reverse Lookup as a vector for the Bash vulnerability CVE-2014-6271 et.al. CVE-2014-3671 references: CVE-2014-6271, CVE-2014-7169, CVE-2014-6277, CVE-2014-6278 CVE-2014-7186 and, CVE-2014-7187 Summary: Above CVEs detail a number ...
gaming.zone.online.fr Open Redirect vulnerability
Open Bug Bounty ID: OBB-50922 Description| Value ---|--- Affected Website:| gaming.zone.online.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...
Moderate: Red Hat Security Advisory: libvirt security and bug fix update
Updated libvirt packages that fix two security issues and one bug are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
CVE2014-6 2 8 7 analysis report-vulnerability warning-the black bar safety net
0x00 is written on the front In the cloud zone, see the HFS 2.3 x Remote command executioncatch the chicken hack doom of the article, just before analysis of binary vulnerabilities, this command injection vulnerability, or the first analysis, from the Internet under the HFS 2.3.279 this version u...
[SECURITY] [DLA 48-1] bind9 security update
Package : bind9 Version : 9.7.3.dfsg-1squeeze12 CVE ID : CVE-2014-0591 Debian Bug : 735190 Fix denial of service attack when processing NSEC3-signed zone queries, fixed by not calling memcpy with overlapping ranges in bin/named/query.c. - patch backported from 9.8.6-P2 by Marc Deslauriers from th...
