Moderate: Red Hat Security Advisory: ceph-deploy security update

An updated ceph-deploy package that fixes two security issues is now available in Red Hat Ceph Storage for Ubuntu 12.04 and Ubuntu 14.04. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Shopify: amazon aws s3 bucket content is public :- http://shopify.com.s3.amazonaws.com/

An Amazon S3 bucket http://shopify.com.s3.amazonaws.com/ was unintentionally left with directory listing enabled. Even though the files in the bucket were all publicly accessible, it was not intended for the directory listing to be visible...

clip bucket 2.6 - Multiple Vulnerabilities

No description provided by source. Exploit : Multiple Vulnerability on ClipBucket 2.6 Date : 09 January 2012 Author : YaDoY666 Website : http://yadoy666.serverisdown.org Software : Clip Bucket Open Source Video Sharing Version : 2.6 Vendor : Clip Bucket http://clip-bucket.com Vendor Response : No...

Clip Bucket <= 1.7.1 Insecure Cookie Handling Vulnerability

No description provided by source. || || | || o,7 || . o7 || q||| o\, : / / . /QQQQQQQQQQQQQQQQQQQ\ /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ| |QQQQ| From Kuwait, PEACE... |QQQQ| |QQQQ| |QQQQ| |QQQQ\ iqaahotmail.fr /QQQQ| \QQQQ\ /QQQQ/ \QQQQ...

UBUNTU-CVE-2013-4563

The udp6ufofragment function in net/ipv6/udpoffload.c in the Linux kernel through 3.12, when UDP Fragmentation Offload UFO is enabled, does not properly perform a certain size comparison before inserting a fragment header, which allows remote attackers to cause a denial of service panic via a lar...

DEBIAN-CVE-2013-4365

Heap-based buffer overflow in the fcgidheaderbucketread function in fcgidbucket.c in the modfcgid module before 2.3.9 for the Apache HTTP Server allows remote attackers to have an unspecified impact via unknown vectors...

Design/Logic Flaw

Walrus in Eucalyptus before 3.2.2 allows remote attackers to cause a denial of service memory, thread, and CPU consumption via a crafted XML message containing a DTD, as demonstrated by a bucket-logging request...

CVE-2012-4067

Walrus in Eucalyptus before 3.2.2 allows remote attackers to cause a denial of service memory, thread, and CPU consumption via a crafted XML message containing a DTD, as demonstrated by a bucket-logging request...

Sensitive Enterprise Data Exposed in Amazon S3 Public Buckets

UPDATE – With companies flocking to cloud services such as Amazon Simple Storage Service S3 to store and serve static content on the cheap, naturally they’re making simple mistakes in doing so—and naturally, a savvy attacker is able to cash in. Researchers at Rapid7 today released data from a...

membase-brute NSE Script

Performs brute force password auditing against Couchbase Membase servers. Script Arguments membase-brute.bucketname if specified, password guessing is performed only against this bucket. creds.service, creds.global See the documentation for the creds library. smbdomain, smbhash, smbnoguest,...

Clip Bucket 2.6 Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit : Multiple Vulnerability on ClipBucket 2.6 Date : 09 January 2012 Author : YaDoY666 Website : http://yadoy666.serverisdown.org Software : Clip Bucket Open Source Video Sharing Version : 2.6 Vendor : Clip Bucket http://clip-bucket.com...

Clip Bucket 2.6 Cross Site Scripting / SQL Injection

Exploit : Multiple Vulnerability on ClipBucket 2.6 Date : 09 January 2012 Author : YaDoY666 Website : http://yadoy666.serverisdown.org Software : Clip Bucket Open Source Video Sharing Version : 2.6 Vendor : Clip Bucket http://clip-bucket.com Vendor Response : None Cross Site Scripting...

apr-util: high memory consumption in apr_brigade_split_line()

Memory leak in the aprbrigadesplitline function in buckets/aprbrigade.c in the Apache Portable Runtime Utility library aka APR-util before 1.3.10, as used in the modreqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service memory...

apr-util: high memory consumption in apr_brigade_split_line()

Memory leak in the aprbrigadesplitline function in buckets/aprbrigade.c in the Apache Portable Runtime Utility library aka APR-util before 1.3.10, as used in the modreqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service memory...

CVE-2010-1623

Memory leak in the aprbrigadesplitline function in buckets/aprbrigade.c in the Apache Portable Runtime Utility library aka APR-util before 1.3.10, as used in the modreqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service memory...

DEBIAN-CVE-2010-1623

Memory leak in the aprbrigadesplitline function in buckets/aprbrigade.c in the Apache Portable Runtime Utility library aka APR-util before 1.3.10, as used in the modreqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service memory...

Design/Logic Flaw

Memory leak in the aprbrigadesplitline function in buckets/aprbrigade.c in the Apache Portable Runtime Utility library aka APR-util before 1.3.10, as used in the modreqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service memory...

Amazon S3 Information Disclosure

I'm not sure if this is the right channel, but I stumbled upon this while trying to manage some of my own files. Although I didn't to get anything further than a list, I'm guessing there's a lot more than could be done. This is an Amazon S3 bucket exploit/bug. Requirement: Have an amazon s3 accou...

Electronic bucket music get shell vulnerability-vulnerability warning-the black bar safety net

index.php line 1 0 $dataname=getdate; ... ... $from=$SERVER"HTTPREFERER"; ... ... iffileexists"$sysdatadir/stat/$dataname.php" $statdata=file"$sysdatadir/stat/$dataname.php"; for$a=0;$acount$statdata;$a++ $statinfo=explode"|",$statdata$a; if$statinfo0==$ip && $timestamp-$statinfo2$timepart//if th...

Clip Bucket <= 1.7.1 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications =========================================================== Clip Bucket = 1.7.1 Insecure Cookie Handling Vulnerability =========================================================== || || | || o,7 || . o7 || q||| o\, : / /...