4794 matches found
Maxthon3 - about:history XCS Trusted Zone Code Execution (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Maxthon3...
Maxthon3 about:history XCS Trusted Zone Code Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Maxthon3...
Maxthon3 about:history XCS Trusted Zone Code Execution
Cross Context Scripting XCS is possible in the Maxthon about:history page. Injection in such privileged/trusted browser zone can be used to modify configuration settings and execute arbitrary commands. Please note this module only works against specific versions of XCS. Currently, we've only...
[SECURITY] Fedora 18 Update: system-config-date-1.10.3-1.fc18
system-config-date is a graphical interface for changing the system date and time, configuring the system time zone, and setting up the NTP daemon to synchronize the time of the system with an NTP time server...
Algerian Hacker hijack Romanian Google and Yahoo Domain
Algerian Hacker today hijack DNS Yahoo, Microsoft or Google and Paypal redirect users to a deface page. Credit being taken by Hacker going by name MCA-CRB, a serial website defacer. MCA-CRB is a prolific online graffiti artist who has defaced at least 5,000 sites, according to records kept by...
Tunisians Voice - Nawaat Portal hacked
Kosova Warriors Group deface a subdomain https://events.nawaat.org/ of Nawaat Portal.. Its an independent collective blog hosted by Tunisians. It gives a voice to all those who, through their civic engagement, take the cover and spread. Our editorial decisions are guided by among other concerns...
Sql injection
SQL injection vulnerability in admin/campaign-zone-link.php in OpenX 2.8.10 before revision 81823 allows remote attackers to execute arbitrary SQL commands via the ids parameter in a link action...
CVE-2012-4990
CVE-2012-4990 : OpenX 2.8.10 (and earlier) is vulnerable to SQL injection via the ids[] parameter in admin/campaign-zone-link.php. The vulnerability allows remote attackers to manipulate SQL queries, with PoCs showing crafted ids[] input and an exploit requiring the attacker to be registered with...
Thousands of sites defaced by Bangladeshi hackers to protest against movie "Innocence of Muslims"
A new group of hackers, known as Bangladesh Hackers group called "3xp1r3 cyber army" has emerged from a collection of Arab countries and it looks like their call to cyber arms is based upon the controversial Nakoula Basseley film, Innocence of Muslims. They deface more than 1000 websites to show...
Microsoft FixIt Will Address IE Zero-Day Vulnerability
With Internet Explorer users still exposed to as many as four active exploits of a zero-day vulnerability in the browser, Microsoft Tuesday night said it will release a FixIt in the next couple of days that will address the issue. A FixIt is an automated tool provided by Microsoft that diagnoses...
SuSE 10 Security Update : bind (ZYPP Patch Number 8298)
The bind nameserver was updated to version 9.6-ESV-R7-P3 to fix a single security problem, where loading a zone file could have caused an assertion abort of the named service. CVE-2012-4244 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...
Reliance Net Connect website Defaced by Hackers
Reliance Net Connect , a venture of Reliance Communications , one of the leading CDMA & GSM Service providers in India website was Defaced by Hackers two days back. No reason mentioned by hackers but on deface page, Hackers wrote "Hacked by Dr-FreaK and Napsters Cr3w". Defaced site link -...
Mandrake Linux Security Advisory : bind (MDKSA-2000:067)
A vulnerability exists with the bind nameserver dealing with compressed zone transfers. This vulnerability can be exploited by authorized zone transfers and used in a DoS attack. The named daemon will crash if it receives this type of zone transfer from an authorized source address. The crash is...
Scientific Linux Security Update : tzdata on SL5.x, SL6.x i386/x86_64 (20120323)
This updated package adds the following time-zone changes to the zone info database : - On 2012-03-15, Morocco announced it will switch to daylight savings time DST on the last Sunday in April 29th April and not the 25th of March. The earlier date was announced as the daylight savings switch date...
Scientific Linux Security Update : tzdata on SL3.x, SL4.x, SL5.x i386/x86_64
The tzdata package contains data files with rules for various time zones around the world. This updated package addresses the following changes to Daylight Saving Time DST observations and to time zones : - Bangladesh changed their clock back to Standard Time on December 31, 2009. BZ550570,...
Scientific Linux Security Update : tzdata on SL5.x, SL6.x i386/x86_64 (20120523)
This update adds the following enhancements : - The following time-zone changes have been added to the zone info database: Haiti entered a period of Daylight Saving Time DST on March 11; Gaza Strip, West Bank and Syria entered a period of DST on March 30. This update has been placed in the securi...
Scientific Linux Security Update : tzdata on SL4.x, SL5.x, SL6.x i386/x86_64
This updated package addresses the following change to Daylight Saving Time DST : - Belarus has canceled the Daylight Saving Time. BZ740000, BZ740001, BZ740014, BZ739668, BZ739916 - New time zones have been added to track South Sudan Africa/Juba and West Bank Asia/Hebron. - Samoa changed its Time...
Scientific Linux Security Update : tzdata on SL4.x, SL5.x, SL6.x i386/x86_64
This updated package addresses the following changes to Daylight Saving Time DST observations : - Kemerovo Oblast, Russia, incorrectly used the NOVT abbreviation, which is UTC+7. With this update, it uses the OMST/OMSST abbreviation and is correctly assigned the UTC+6 time zone. BZ596800 -...
nsd -- Denial of Service
Tom Hendrikx reports: It is possible to crash SIGSEGV a NSD child server process by sending it a DNS packet from any host on the internet and the per zone stats build option is enabled. A crashed child process will automatically be restarted by the parent process, but an attacker may keep the NSD...
