PT-2013-4587

Name of the Vulnerable Software and Affected Versions Oracle and Sun Systems Products Suite versions 3.2 through 4.0 Description The issue affects confidentiality, integrity, and availability, and is related to the Zone Cluster Infrastructure in the Solaris Cluster component. Local users can...

CVE-2013-3746: Undefined Security Weakness

Unspecified vulnerability in the Solaris Cluster component in Oracle and Sun Systems Products Suite 3.2, 3.3, and 4 prior to 4.1 SRU 3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Zone Cluster Infrastructure...

Thousands of websites defaced after Belgium and Netherland domain registrars hacked

On Tuesday, The Foundation for Internet Domain Registration .NL in the Netherlands SIDN was compromised and some malicious files were uploaded to their server by hackers. According to a blog post, SQL injection vulnerability was used to compromise one of the website 25jaarvan.nl on same server...

CentOS 5 : java-1.6.0-openjdk (CESA-2009:1584)

Updated java-1.6.0-openjdk packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. These packages provide the OpenJDK 6 Java Runtime Environment and the OpenJD...

CVE-2013-4628

The firewall module on the Huawei Quidway Service Process Unit SPU board S7700, S9300, and S9700 on Huawei Campus Switch devices allows remote authenticated users to obtain sensitive information from the high-priority security zone by leveraging access to the low-priority security zone...

Information disclosure

The firewall module on the Huawei Quidway Service Process Unit SPU board S7700, S9300, and S9700 on Huawei Campus Switch devices allows remote authenticated users to obtain sensitive information from the high-priority security zone by leveraging access to the low-priority security zone...

CVE-2013-4628

The firewall module on the Huawei Quidway Service Process Unit SPU board S7700, S9300, and S9700 on Huawei Campus Switch devices allows remote authenticated users to obtain sensitive information from the high-priority security zone by leveraging access to the low-priority security zone...

CVE-2013-4628: Exposure of Sensitive Information to an Unauthorized Actor

The firewall module on the Huawei Quidway Service Process Unit SPU board S7700, S9300, and S9700 on Huawei Campus Switch devices allows remote authenticated users to obtain sensitive information from the high-priority security zone by leveraging access to the low-priority security zone...

zone_h

This plugin searches the zone-h.org defacement database and parses the result. The information stored in that database is useful to know about previous defacements to the target website. In some cases, the defacement site provides information about the exploited vulnerability, which may be still...

CVE-2013-3919

resolver.c in ISC BIND 9.8.5 before 9.8.5-P1, 9.9.3 before 9.9.3-P1, and 9.6-ESV-R9 before 9.6-ESV-R9-P1, when a recursive resolver is configured, allows remote attackers to cause a denial of service assertion failure and named daemon exit via a query for a record in a malformed zone...

CVE-2013-3919: Undefined Security Weakness

resolver.c in ISC BIND 9.8.5 before 9.8.5-P1, 9.9.3 before 9.9.3-P1, and 9.6-ESV-R9 before 9.6-ESV-R9-P1, when a recursive resolver is configured, allows remote attackers to cause a denial of service assertion failure and named daemon exit via a query for a record in a malformed zone...

PT-2013-4742

Name of the Vulnerable Software and Affected Versions ISC BIND versions 9.6-ESV-R9 before 9.6-ESV-R9-P1 ISC BIND versions 9.8.5 before 9.8.5-P1 ISC BIND versions 9.9.3 before 9.9.3-P1 Description The issue allows remote attackers to cause a denial of service, resulting in an assertion failure and...

dns/bind9* -- A recursive resolver can be crashed by a query for a malformed zone

ISC reports: A bug has been discovered in the most recent releases of BIND 9 which has the potential for deliberate exploitation as a denial-of-service attack. By sending a recursive resolver a query for a record in a specially malformed zone, an attacker can cause BIND 9 to exit with a fatal...

北京亿中邮dns域传送漏洞

简要描述： 一dns域传送漏洞 详细说明： 北京亿中邮dns域传送漏洞 漏洞证明： root@kali: dnsenum eyou.net...

53KF的dns域传送漏洞

简要描述： 又又又一个dns域传送漏洞 详细说明： 53KF企业在线平台dns域传送漏洞 漏洞证明： root@kali: dnsenum 53kf.com...

ISC BIND 9 Zero-Length RDATA Section Denial of Service / Information Disclosure

Binary data 6806.prm...

Pentagon Decision Moves Android Security in Right Direction

Android’s security gets its share of grief, but perhaps it’s been a bit misguided. Like many other popular open source technologies, there are a number of different flavors of the mobile platform, each with its security properties and nuances. That’s why the Pentagon’s decision to endorse the use...

Google Oman domain hijacked by Moroccan Hackers

Google's Oman domain was reportedly defaced today due to a hijacking of the company's local domain name by by Moroccan Hackers. The credit being taken by "SQLMaster And Z0mbi3Ma" serial website defacers. It seems that hackers successfully beached into Oman Telecommunication Company, who is domain...

Description of the Office Web Apps Server 2013 update: April 9, 2013

None None...

DNS zone transfer exploit and repair notes-vulnerability warning-the black bar safety net

A, title: DNS zone transfer exploit and fix Second, the DNS transfer of the domain use 2.1 using BT5 tool to get DNS information cd /pentest/enumeration/dns/dnsenum ./ dnsenum.pl --enum domain.com you can omit the--enum,here alert note: the host name and the field name to distinguish） Field Name...