MaraDNS 2.0.x < 2.0.05 Hash Collision Zone File Record Local DoS

According to its self-reported version number, the MaraDNS server running on the remote host is affected by a hash collision issue when parsing records in zone files. This issue could allow a local attacker to cause a denial of service. C Tenable Network Security, Inc. include"compat.inc"; if...

Microsoft Internet Explorer内存破坏漏洞(CVE-2014-0298)

BUGTRAQ ID: 66025 CVECAN ID: CVE-2014-0298 Internet Explorer是微软公司推出的一款网页浏览器。 Internet Explorer 没有正确访问内存对象，在实现上存在远程代码执行漏洞，成功利用后可破坏内存，在当前用户权限下执行任意代码。 0 Microsoft Internet Explorer 6-11 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 设置互联网和内联网安全区域设置为“高” 配置IE在运行活动脚本之前提示或直接禁用。 应用Microsoft Fix...

Palo Alto Networks PAN-OS 5.0.9 Multiple Vulnerabilities

The remote host is running version 5.0.9 of Palo Alto Networks PAN-OS. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists due to an inability to handle IP packets larger than 1480 bytes through an Active/Active VWire setup. An attacker can exploit...

Information disclosure

Microsoft Internet Explorer 9 through 11 allows remote attackers to read content from a different 1 domain or 2 zone via a crafted web site, aka "Internet Explorer Cross-domain Information Disclosure Vulnerability."...

Syrian Electronic Army's own website got hacked by Turkish hacker

Oops.. Hackers got Hacked! The Syrian Electronic Army, who has hacked hundreds of High Profile targets in 2013-14, today they got hacked by a Turkish hacker. Turkguvenligi, a Turkish hacker told The Hacker News that he hacked and defaced the official website of the hacking group SEA sea.sy and...

ISC BIND 9 NSEC3-Signed Zone Handling DoS

According to its self-reported version number, the remote installation of BIND is affected by a denial of service vulnerability. This issue exists due to the handling of queries for NSEC3-signed zones related to the memcpy function in the 'name.c' file on authoritative nameservers. Note that Ness...

ISC bind DoS

Crash on parsing malformed request to NSEC3-signed zone...

[FoxAnalysis] Firefox Internet History Analysis Software

FoxAnalysis Plus is a software tool for extracting, viewing and analysing internet history from the Mozilla Firefox web browser. The main features are described below: Extract History :: Extract history regarding bookmarks, cookies, downloads, favicons, form entries, logins, saved sessions and...

Tajikistan Domain Registrar hacked; Google, Yahoo, Twitter, Amazon also defaced

Google’s primary search domain for Tajikistan had seemingly been hacked yesterday, along with other high profile domains including Yahoo, Twitter, Amazon -- redirected to a defaced page. Actually neither Google, nor Twitter servers have been hacked, rather website of Tajikistan's Domain registrar...

Solaris 10 (x86) : 144222-16 (deprecated)

Vulnerability in the Solaris Cluster component of Oracle and Sun Systems Products Suite subcomponent: Zone Cluster Infrastructure. Supported versions that are affected are 3.2, 3.3 and 4 prior to 4.1 SRU 3. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of...

Solaris 10 (sparc) : 144221-17 (deprecated)

Vulnerability in the Solaris Cluster component of Oracle and Sun Systems Products Suite subcomponent: Zone Cluster Infrastructure. Supported versions that are affected are 3.2, 3.3 and 4 prior to 4.1 SRU 3. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of...

Solaris 10 (sparc) : 145333-39 (deprecated)

Vulnerability in the Solaris Cluster component of Oracle and Sun Systems Products Suite subcomponent: Zone Cluster Infrastructure. Supported versions that are affected are 3.2, 3.3 and 4 prior to 4.1 SRU 3. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of...

OpenJDK: java.util.TimeZone does not restrict setting of default time zone (Libraries, 8001029)

Unspecified vulnerability in the Java SE, Java SE Embedded component in Oracle Java SE Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related ...

CVE-2013-3909

Microsoft Internet Explorer 6 through 8 allows remote attackers to read content from a different 1 domain or 2 zone via crafted characters in Cascading Style Sheets CSS token sequences, aka "Internet Explorer Information Disclosure Vulnerability."...

OpenJDK: java.util.TimeZone does not restrict setting of default time zone (Libraries, 8001029)

Unspecified vulnerability in the Java SE, Java SE Embedded component in Oracle Java SE Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related ...

OpenJDK: java.util.TimeZone does not restrict setting of default time zone (Libraries, 8001029)

Unspecified vulnerability in the Java SE, Java SE Embedded component in Oracle Java SE Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related ...

OpenJDK: java.util.TimeZone does not restrict setting of default time zone (Libraries, 8001029)

Unspecified vulnerability in the Java SE, Java SE Embedded component in Oracle Java SE Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related ...

OpenJDK: java.util.TimeZone does not restrict setting of default time zone (Libraries, 8001029)

Unspecified vulnerability in the Java SE, Java SE Embedded component in Oracle Java SE Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related ...

CVE-2013-5543

Cisco IOS XE 3.4 before 3.4.2S and 3.5 before 3.5.1S on 1000 ASR devices allows remote attackers to cause a denial of service device reload via malformed ICMP error packets associated with a 1 TCP or 2 UDP session that is under inspection by the Zone-Based Firewall ZBFW component, aka Bug ID...

CVE-2013-5543

CVE-2013-5543 affects Cisco IOS XE on 1000 Series ASR routers. A vulnerability in the Zone-Based Firewall (ZBFW) handling allows remote attackers to trigger a device reload via malformed ICMP error packets bound to an active TCP/UDP session (Bug CSCtt26470). Affected versions are IOS XE 3.4 prior...