CVE-2013-1145

Memory leak in Cisco IOS 12.2, 12.4, 15.0, and 15.1, when Zone-Based Policy Firewall SIP application layer gateway inspection is enabled, allows remote attackers to cause a denial of service memory consumption or device reload via malformed SIP messages, aka Bug ID CSCtl99174...

Memory corruption

Memory leak in Cisco IOS 12.2, 12.4, 15.0, and 15.1, when Zone-Based Policy Firewall SIP application layer gateway inspection is enabled, allows remote attackers to cause a denial of service memory consumption or device reload via malformed SIP messages, aka Bug ID CSCtl99174...

CVE-2013-1145: Undefined Security Weakness

Memory leak in Cisco IOS 12.2, 12.4, 15.0, and 15.1, when Zone-Based Policy Firewall SIP application layer gateway inspection is enabled, allows remote attackers to cause a denial of service memory consumption or device reload via malformed SIP messages, aka Bug ID CSCtl99174...

Cisco IOS Software Zone-Based Policy Firewall Session Initiation Protocol Inspection Denial of Service Vulnerability

Cisco IOS Software contains a memory leak vulnerability that could be triggered through the processing of malformed Session Initiation Protocol SIP messages. Exploitation of this vulnerability could cause an interruption of services. Only devices that are configured for SIP inspection are affecte...

Microsoft Internet Explorer removeChild释放后重用远程代码执行漏洞(CVE-2013-0094)(MS13-021)

BUGTRAQ ID: 58348 CVECAN ID: CVE-2013-0094 Microsoft Internet Explorer是微软公司推出的一款网页浏览器 Microsoft Internet Explorer 6/7/8/9/10在removeChild的实现上存在释放后重用远程代码执行漏洞，在用户使用 Internet Explorer 查看特制网页时允许远程执行代码。成功利用这些漏洞的攻击者可以获得与当前用户相同的用户权限。那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小 0 Microsoft Internet Explorer 9...

Nmap NSE 6.01: dns-zone-transfer

Requests a zone transfer AXFR from a DNS server. The script sends an AXFR query to a DNS server. The domain to query is determined by examining the name given on the command line, the DNS server's hostname, or it can be specified with the dns-zone-transfer.domain' script argument. If the query is...

Nmap NSE 6.01: dns-zone-transfer

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

bind: denial of service when processing queries and with both DNS64 and RPZ enabled

ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service assertion failure and named daemon exit via a query for an AAAA record...

Microsoft Internet Explorer Shift JIS字符信息泄露漏洞(CVE-2013-0015) (ms13-009)

BUGTRAQ ID: 57822 CVECAN ID: CVE-2013-0015 Microsoft Internet Explorer是微软公司推出的一款网页浏览器。 Shift JIS是日本语的字符编码。Internet Explorer 6, 7, 8, 9没有正确执行Shift JIS编码的自动选择，通过构造触发跨域滚动事件的特制网站，远程攻击者可从不同的域或区域读取内容，造成信息泄露。 0 Microsoft Internet Explorer 6 - 9 临时解决方法： 如果您不能立刻安装补丁或者升级，建议您采取以下措施以降低威胁： 将互联网和局域网安全区域设置为“高”...

Malawi Google ,MSN, Yahoo domains defaced by TiGER-M@TE

Famous Bangladeshi hacker TiGER-M@TE known for his big defacements strikes again! This time he teams up with another hacker 'h311 c0d3' for another big defacement campaign. According to mirror records on Zone-H, These hackers managed to deface Malawi Google, Yahoo, MSN, Windows and many more top...

Malawi Google ,MSN, Yahoo domains defaced by TiGER-M@TE

Famous Bangladeshi hacker TiGER-M@TE known for his big defacements strikes again! This time he teams up with another hacker 'h311 c0d3' for another big defacement campaign. According to mirror records on Zone-H, These hackers managed to deface Malawi Google, Yahoo, MSN, Windows and many more top...

CVE-2013-0015

Microsoft Internet Explorer 6 through 9 does not properly perform auto-selection of the Shift JIS encoding, which allows remote attackers to read content from a different 1 domain or 2 zone via a crafted web site that triggers cross-domain scrolling events, aka "Shift JIS Character Encoding...

Cross site scripting

Microsoft Internet Explorer 6 through 9 does not properly perform auto-selection of the Shift JIS encoding, which allows remote attackers to read content from a different 1 domain or 2 zone via a crafted web site that triggers cross-domain scrolling events, aka "Shift JIS Character Encoding...

CVE-2012-6526

SQL injection vulnerability in showcode.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrary SQL commands via the codeid parameter...

CVE-2012-6526

The CVE applies to Vastal I-Tech Freelance Zone, specifically the show_code.php component. The root cause is a SQL injection in the code_id parameter that allows remote attackers to execute arbitrary SQL commands. In the provided sources, vulnerability details indicate that an attacker can exploi...

CVE-2012-6526

SQL injection vulnerability in showcode.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrary SQL commands via the codeid parameter...

PT-2013-1990

Name of the Vulnerable Software and Affected Versions Vastal I-Tech Freelance Zone affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the code id parameter in the show code.php file. Recommendations At the moment,...

CVE-2012-6526: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in showcode.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrary SQL commands via the codeid parameter...

DEBIAN-CVE-2012-5689

ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service assertion failure and named daemon exit via a query for an AAAA record...

CVE-2012-5689

The CVE-2012-5689 issue affects ISC BIND 9.8.x–9.9.2-P1 when DNS64 with RPZ is used without an AAAA rewrite rule, allowing remote attackers to cause a DoS via an AAAA query (assertion failure and named exit). Affected configurations point to DNS64 + RPZ Rewriting; mitigation in practice is to ens...