Malawi Google ,MSN, Yahoo domains defaced by TiGER-M@TE

Famous Bangladeshi hacker TiGER-M@TE known for his big defacements strikes again! This time he teams up with another hacker 'h311 c0d3' for another big defacement campaign. According to mirror records on Zone-H, These hackers managed to deface Malawi Google, Yahoo, MSN, Windows and many more top...

Cross site scripting

Microsoft Internet Explorer 6 through 9 does not properly perform auto-selection of the Shift JIS encoding, which allows remote attackers to read content from a different 1 domain or 2 zone via a crafted web site that triggers cross-domain scrolling events, aka "Shift JIS Character Encoding...

CVE-2013-0015

Microsoft Internet Explorer 6 through 9 does not properly perform auto-selection of the Shift JIS encoding, which allows remote attackers to read content from a different 1 domain or 2 zone via a crafted web site that triggers cross-domain scrolling events, aka "Shift JIS Character Encoding...

CVE-2012-6526

SQL injection vulnerability in showcode.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrary SQL commands via the codeid parameter...

CVE-2012-6526

SQL injection vulnerability in showcode.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrary SQL commands via the codeid parameter...

CVE-2012-6526

The CVE applies to Vastal I-Tech Freelance Zone, specifically the show_code.php component. The root cause is a SQL injection in the code_id parameter that allows remote attackers to execute arbitrary SQL commands. In the provided sources, vulnerability details indicate that an attacker can exploi...

PT-2013-1990

Name of the Vulnerable Software and Affected Versions Vastal I-Tech Freelance Zone affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the code id parameter in the show code.php file. Recommendations At the moment,...

CVE-2012-6526: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in showcode.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrary SQL commands via the codeid parameter...

DEBIAN-CVE-2012-5689

ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service assertion failure and named daemon exit via a query for an AAAA record...

CVE-2012-5689

The CVE-2012-5689 issue affects ISC BIND 9.8.x–9.9.2-P1 when DNS64 with RPZ is used without an AAAA rewrite rule, allowing remote attackers to cause a DoS via an AAAA query (assertion failure and named exit). Affected configurations point to DNS64 + RPZ Rewriting; mitigation in practice is to ens...

UBUNTU-CVE-2012-5689

ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service assertion failure and named daemon exit via a query for an AAAA record...

CVE-2012-5689: Improper Input Validation

ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service assertion failure and named daemon exit via a query for an AAAA record...

SuSE 11.2 Security Update : bind (SAT Patch Number 6830)

The bind nameserver was updated to version 9.6-ESV-R7-P3 to fix a single security problem, where loading a zone file could have caused an assertion abort of the named service. CVE-2012-4244 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

PT-2013-1833

Name of the Vulnerable Software and Affected Versions ISC BIND versions 9.8.x through 9.8.4-P1 ISC BIND versions 9.9.x through 9.9.2-P1 Description The issue allows remote attackers to cause a denial of service, resulting in an assertion failure and the named daemon exiting. This occurs when a...

Turkmenistan Gmail, Microsoft, Youtube Domains Hijacked

Iranian hackers deface multiple big companies Turkmenistan domains .tm yesterday using DNS poisoning attack. All hacked domains are registered by NIC at Turkmenistan. Hacker managed to find and exploit a SQL Injection vulnerability in NIC website in order to get database of the site. Because the...

Scientific Linux Security Update : tzdata enhancement update on SL5.x, SL6.x i386/x86_64 (20130123)

This update adds the following enhancements : On Nov 10, 2012, Libya changed to the time zone UTC+1. Therefore, starting from the year 2013 Libya will be switching to daylight saving time on the last Friday of March and back to the standard time on the last Friday of October. The time zone settin...

kernel security and bug fix update

kernel 2.6.18-348.1.1.0.1 - oprofile x86, mm: Add getuserpagesfast orabug 14277030 - oprofile export getuserpagesfast function orabug 14277030 - oprofile oprofile, x86: Fix nmi-unsafe callgraph support orabug 14277030 - oprofile oprofile: use KMNMI slot for kmapatomic orabug 14277030 - oprofile...

Event ID 10378 in the Operations Manager Event Log on Collector

Challenge Operations Manager Event Log on the Collector server contains the following warning: ID 10378 Module was unable to convert WMI setting .\timestamp Event IDs 1103 and 4506 may also be observed. Cause The root cause is currently investigated by Microsoft. This article will be updated afte...

Payback, Indonesian president website defaced

Hackers crew Jember Hacker terrorists JHT deface the official website of Indonesian president http://www.presidensby.info with a message reads, “This is a PayBack From Jember Hacker Team”. Hackers deface website of president Susilo Bambang Yudhoyono SBY apparently in protest at growing corruption...

[Knock] Subdomain Scanner

Knock is a python script, written by Gianni 'guelfoweb' Amato , designed to enumerate subdomains on a target domain through a wordlist. For more information I have posted a documentation page. If you want to see how it works, you can see this sample output: Simple Scan Zone Transfer Scan Wildcard...