SQL Injection Vulnerability in Special Equipment Safety Monitoring System of Fuzhou Development Zone Chuangda Electronics Co.

Fuzhou Development Zone Chuangda Electronics Co., Ltd. special equipment safety monitoring system is a set of safety monitoring system for regulating elevators and other special equipment. Fuzhou Development Zone, Chuangda Electronics Co., Ltd. special equipment safety monitoring system there are...

ipa security, bug fix, and enhancement update

4.1.0-18.0.1 - Replace login-screen-logo.png 20362818 - Drop subscription-manager requires for OL7 - Drop redhat-access-plugin-ipa requires for OL7 - Blank out header-logo.png product-name.png 4.1.0-18 - Fix ipa-pwd-extop global configuration caching 1187342 - group-detach does not add correct...

SQL Injection Vulnerability in the Dynamic Supervision System of Special Equipment Safety Supervision of Fuzhou Development Zone Chuangda Electronics Co.

Fuzhou Development Zone Chuangda Electronics Co., Ltd. special equipment safety monitoring dynamic supervision system is a set of safety monitoring system used to regulate elevators and other special equipment. Fuzhou Development Zone, Chuangda Electronics Co., Ltd. special equipment safety...

RHEL 7 : ipa (RHSA-2015:0442)

Updated ipa packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

Fedora 20 : php-5.5.22-1.fc20 (2015-2328)

19 Feb 2015, PHP 5.5.22 Core : - Fixed bug 67068 getClosure returns somethings that's not a closure. Danack at basereality dot com - Fixed bug 68925 Mitigation for CVE-2015-0235 ' GHOST: glibc gethostbyname buffer overflow. Stas - Fixed bug 68942 Use after free vulnerability in unserialize with...

PHP Memory Error Referencing Remote Code Execution Vulnerability

PHP is a popular web programming language. PHP unserialize handles DateTimeZone with a memory error referencing a remote code execution vulnerability, which allows attackers to exploit the vulnerability to crash the application or execute arbitrary code...

CVE-2015-0593

The Zone-Based Firewall implementation in Cisco IOS 12.4122T and earlier does not properly manage session-object structures, which allows remote attackers to cause a denial of service device reload via crafted network traffic, aka Bug ID CSCul65003...

Cross site scripting

The Zone-Based Firewall implementation in Cisco IOS 12.4122T and earlier does not properly manage session-object structures, which allows remote attackers to cause a denial of service device reload via crafted network traffic, aka Bug ID CSCul65003...

CVE-2015-0593

The Zone-Based Firewall implementation in Cisco IOS 12.4122T and earlier does not properly manage session-object structures, which allows remote attackers to cause a denial of service device reload via crafted network traffic, aka Bug ID CSCul65003...

CVE-2015-0593

The CVE-2015-0593 vulnerability affects Cisco IOS, specifically Zone-Based Firewall on 12.4(122)T and earlier. The issue arises from improper management of session-object structures, allowing remote attackers to trigger a denial of service resulting in a device reload via crafted network traffic ...

CVE-2015-0592

The Zone-Based Firewall implementation in Cisco IOS 15.42T3 and earlier allows remote attackers to cause a denial of service device reload via crafted network traffic that triggers incorrect kernel-timer handling, aka Bug ID CSCuh25672...

Cross site scripting

The Zone-Based Firewall implementation in Cisco IOS 15.42T3 and earlier allows remote attackers to cause a denial of service device reload via crafted network traffic that triggers incorrect kernel-timer handling, aka Bug ID CSCuh25672...

CVE-2015-0592

Cisco IOS Zone-Based Firewall (15.4(2)T3 and earlier) is affected by a kernel-timer handling bug (Bug ID CSCuh25672) that enables a remote attacker to trigger a device reload via crafted traffic. The vulnerability stems from improper management of kernel timers within the kernel timer subsystem u...

CVE-2015-0070

Microsoft Internet Explorer 6 through 11 allows remote attackers to read content from a different 1 domain or 2 zone via a crafted web site, aka "Internet Explorer Cross-domain Information Disclosure Vulnerability."...

Cisco IOS Software Kernel Timer Vulnerability

A vulnerability in the kernel timers in Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of the affected device. The vulnerability is due to improper management of kernel timers. An attacker could exploit this vulnerability by sending crafted traffic, causing...

DNS Enumeration Script: DNSRecon

DNS reconnaissance is part of the information gathering stage on a penetration test engagement. When a penetration tester is performing a DNS reconnaissance he is trying to obtain as much information as he can regarding the DNS servers and their records. The information that can be gathered can...

CSRF Vulnerability Patched in GoDaddy Domain Settings

Domain registrar GoDaddy yesterday patched a cross-site request forgery vulnerability that could have allowed an attacker to change domain settings on a site registered with GoDaddy. The flaw was reported on Saturday and patched within 48 hours, according to Dylan Saccomanni, a web application...

Global Internet Authority ICANN Has Been Hacked

The Internet Corporation for Assigned Names and Numbers ICANN has been hacked by unknown attackers that allowed them to gain administrative access to some of the organization's systems, the organization confirmed. The attackers used "spear phishing" campaign to target sensitive systems operated b...

Attackers Compromise ICANN, Zone Files System

Unknown hackers were able to compromise vital systems belonging to ICANN, the organization that manages the global top-level domain system, and had access to the system that manages the files with data on resolving specific domain names. The attack apparently took place in November and ICANN...

[SECURITY] [DLA 107-1] unbound security update

Package : unbound Version : 1.4.6-1+squeeze4 CVE ID : CVE-2014-8602 Debian Bug : 772622 Florian Maury from ANSSI discovered that unbound, a validating, recursive, and caching DNS resolver, was prone to a denial of service vulnerability. An attacker crafting a malicious zone and able to emit or ma...