Sql injection

SQL injection vulnerability in admin/campaign-zone-link.php in OpenX 2.8.10 before revision 81823 allows remote attackers to execute arbitrary SQL commands via the ids parameter in a link action...

CVE-2012-4990

CVE-2012-4990 : OpenX 2.8.10 (and earlier) is vulnerable to SQL injection via the ids[] parameter in admin/campaign-zone-link.php. The vulnerability allows remote attackers to manipulate SQL queries, with PoCs showing crafted ids[] input and an exploit requiring the attacker to be registered with...

PT-2012-5708

Name of the Vulnerable Software and Affected Versions OpenX version 2.8.10 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the ids parameter in a link action in the admin/campaign-zone-link.php file. Recommendations For OpenX version 2.8.10,...

CVE-2012-4990: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/campaign-zone-link.php in OpenX 2.8.10 before revision 81823 allows remote attackers to execute arbitrary SQL commands via the ids parameter in a link action...

Thousands of sites defaced by Bangladeshi hackers to protest against movie "Innocence of Muslims"

A new group of hackers, known as Bangladesh Hackers group called "3xp1r3 cyber army" has emerged from a collection of Arab countries and it looks like their call to cyber arms is based upon the controversial Nakoula Basseley film, Innocence of Muslims. They deface more than 1000 websites to show...

Microsoft FixIt Will Address IE Zero-Day Vulnerability

With Internet Explorer users still exposed to as many as four active exploits of a zero-day vulnerability in the browser, Microsoft Tuesday night said it will release a FixIt in the next couple of days that will address the issue. A FixIt is an automated tool provided by Microsoft that diagnoses...

SuSE 10 Security Update : bind (ZYPP Patch Number 8298)

The bind nameserver was updated to version 9.6-ESV-R7-P3 to fix a single security problem, where loading a zone file could have caused an assertion abort of the named service. CVE-2012-4244 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

Reliance Net Connect website Defaced by Hackers

Reliance Net Connect , a venture of Reliance Communications , one of the leading CDMA & GSM Service providers in India website was Defaced by Hackers two days back. No reason mentioned by hackers but on deface page, Hackers wrote "Hacked by Dr-FreaK and Napsters Cr3w". Defaced site link -...

Mandrake Linux Security Advisory : bind (MDKSA-2000:067)

A vulnerability exists with the bind nameserver dealing with compressed zone transfers. This vulnerability can be exploited by authorized zone transfers and used in a DoS attack. The named daemon will crash if it receives this type of zone transfer from an authorized source address. The crash is...

Scientific Linux Security Update : tzdata on SL5.x, SL6.x i386/x86_64 (20120523)

This update adds the following enhancements : - The following time-zone changes have been added to the zone info database: Haiti entered a period of Daylight Saving Time DST on March 11; Gaza Strip, West Bank and Syria entered a period of DST on March 30. This update has been placed in the securi...

Scientific Linux Security Update : tzdata on SL3.x, SL4.x, SL5.x i386/x86_64

The tzdata package contains data files with rules for various time zones around the world. This updated package addresses the following changes to Daylight Saving Time DST observations and to time zones : - Bangladesh changed their clock back to Standard Time on December 31, 2009. BZ550570,...

Scientific Linux Security Update : tzdata on SL4.x, SL5.x, SL6.x i386/x86_64

This updated package addresses the following changes to Daylight Saving Time DST observations : - Kemerovo Oblast, Russia, incorrectly used the NOVT abbreviation, which is UTC+7. With this update, it uses the OMST/OMSST abbreviation and is correctly assigned the UTC+6 time zone. BZ596800 -...

Scientific Linux Security Update : tzdata on SL4.x, SL5.x, SL6.x i386/x86_64

This updated package addresses the following change to Daylight Saving Time DST : - Belarus has canceled the Daylight Saving Time. BZ740000, BZ740001, BZ740014, BZ739668, BZ739916 - New time zones have been added to track South Sudan Africa/Juba and West Bank Asia/Hebron. - Samoa changed its Time...

Scientific Linux Security Update : tzdata on SL5.x, SL6.x i386/x86_64 (20120323)

This updated package adds the following time-zone changes to the zone info database : - On 2012-03-15, Morocco announced it will switch to daylight savings time DST on the last Sunday in April 29th April and not the 25th of March. The earlier date was announced as the daylight savings switch date...

nsd -- Denial of Service

Tom Hendrikx reports: It is possible to crash SIGSEGV a NSD child server process by sending it a DNS packet from any host on the internet and the per zone stats build option is enabled. A crashed child process will automatically be restarted by the parent process, but an attacker may keep the NSD...

CVE-2012-1765

Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect integrity via unknown vectors related to Branded Zone...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect integrity via unknown vectors related to Branded Zone...

CVE-2012-1765

CVE-2012-1765 affects Oracle Sun Solaris 10, specifically the Branded Zone component. The vulnerability is described as an unspecified local integrity issue within Branded Zone that can enable a local attacker to write to arbitrary OS locations. Exploitation requires local access (logon) to the o...

CVE-2012-1765

Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect integrity via unknown vectors related to Branded Zone...

CVE-2012-1765: Undefined Security Weakness

Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect integrity via unknown vectors related to Branded Zone...