4728 matches found
Sql injection
SQL injection vulnerability in admin/campaign-zone-link.php in OpenX 2.8.10 before revision 81823 allows remote attackers to execute arbitrary SQL commands via the ids parameter in a link action...
CVE-2012-4990
CVE-2012-4990 : OpenX 2.8.10 (and earlier) is vulnerable to SQL injection via the ids[] parameter in admin/campaign-zone-link.php. The vulnerability allows remote attackers to manipulate SQL queries, with PoCs showing crafted ids[] input and an exploit requiring the attacker to be registered with...
Thousands of sites defaced by Bangladeshi hackers to protest against movie "Innocence of Muslims"
A new group of hackers, known as Bangladesh Hackers group called "3xp1r3 cyber army" has emerged from a collection of Arab countries and it looks like their call to cyber arms is based upon the controversial Nakoula Basseley film, Innocence of Muslims. They deface more than 1000 websites to show...
Microsoft FixIt Will Address IE Zero-Day Vulnerability
With Internet Explorer users still exposed to as many as four active exploits of a zero-day vulnerability in the browser, Microsoft Tuesday night said it will release a FixIt in the next couple of days that will address the issue. A FixIt is an automated tool provided by Microsoft that diagnoses...
SuSE 10 Security Update : bind (ZYPP Patch Number 8298)
The bind nameserver was updated to version 9.6-ESV-R7-P3 to fix a single security problem, where loading a zone file could have caused an assertion abort of the named service. CVE-2012-4244 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...
Reliance Net Connect website Defaced by Hackers
Reliance Net Connect , a venture of Reliance Communications , one of the leading CDMA & GSM Service providers in India website was Defaced by Hackers two days back. No reason mentioned by hackers but on deface page, Hackers wrote "Hacked by Dr-FreaK and Napsters Cr3w". Defaced site link -...
Mandrake Linux Security Advisory : bind (MDKSA-2000:067)
A vulnerability exists with the bind nameserver dealing with compressed zone transfers. This vulnerability can be exploited by authorized zone transfers and used in a DoS attack. The named daemon will crash if it receives this type of zone transfer from an authorized source address. The crash is...
Scientific Linux Security Update : tzdata on SL5.x, SL6.x i386/x86_64 (20120523)
This update adds the following enhancements : - The following time-zone changes have been added to the zone info database: Haiti entered a period of Daylight Saving Time DST on March 11; Gaza Strip, West Bank and Syria entered a period of DST on March 30. This update has been placed in the securi...
Scientific Linux Security Update : tzdata on SL3.x, SL4.x, SL5.x i386/x86_64
The tzdata package contains data files with rules for various time zones around the world. This updated package addresses the following changes to Daylight Saving Time DST observations and to time zones : - Bangladesh changed their clock back to Standard Time on December 31, 2009. BZ550570,...
Scientific Linux Security Update : tzdata on SL4.x, SL5.x, SL6.x i386/x86_64
This updated package addresses the following changes to Daylight Saving Time DST observations : - Kemerovo Oblast, Russia, incorrectly used the NOVT abbreviation, which is UTC+7. With this update, it uses the OMST/OMSST abbreviation and is correctly assigned the UTC+6 time zone. BZ596800 -...
Scientific Linux Security Update : tzdata on SL5.x, SL6.x i386/x86_64 (20120323)
This updated package adds the following time-zone changes to the zone info database : - On 2012-03-15, Morocco announced it will switch to daylight savings time DST on the last Sunday in April 29th April and not the 25th of March. The earlier date was announced as the daylight savings switch date...
Scientific Linux Security Update : tzdata on SL4.x, SL5.x, SL6.x i386/x86_64
This updated package addresses the following change to Daylight Saving Time DST : - Belarus has canceled the Daylight Saving Time. BZ740000, BZ740001, BZ740014, BZ739668, BZ739916 - New time zones have been added to track South Sudan Africa/Juba and West Bank Asia/Hebron. - Samoa changed its Time...
nsd -- Denial of Service
Tom Hendrikx reports: It is possible to crash SIGSEGV a NSD child server process by sending it a DNS packet from any host on the internet and the per zone stats build option is enabled. A crashed child process will automatically be restarted by the parent process, but an attacker may keep the NSD...
CVE-2012-1765
Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect integrity via unknown vectors related to Branded Zone...
Design/Logic Flaw
Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect integrity via unknown vectors related to Branded Zone...
CVE-2012-1765
CVE-2012-1765 affects Oracle Sun Solaris 10, specifically the Branded Zone component. The vulnerability is described as an unspecified local integrity issue within Branded Zone that can enable a local attacker to write to arbitrary OS locations. Exploitation requires local access (logon) to the o...
CVE-2012-1765
Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect integrity via unknown vectors related to Branded Zone...
OpenJDK: unrestricted use of TimeZone.setDefault() (i18n, 7110687)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.235 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality,...
NVIDIA Developer Forums Hacked, 400000 user accounts at Risk
Nvidia shut down its Developer Zone online forum today after hackers gained access to members' account details.A statement Nvidia posted on the forum reads, "Nvidia suspended operations today of the Nvidia Developer Zone. We did this in response to attacks on the site by unauthorised third partie...
