CVE-2013-6426: Undefined Security Weakness

The cloudformation-compatible API in OpenStack Orchestration API Heat before Havana 2013.2.1 and Icehouse before icehouse-2 does not properly enforce policy rules, which allows local in-instance users to bypass intended access restrictions and 1 create a stack via the CreateStack method or 2 upda...

CVE-2013-6428: Undefined Security Weakness

The ReST API in OpenStack Orchestration API Heat before Havana 2013.2.1 and Icehouse before icehouse-2 allows remote authenticated users to bypass the tenant scoping restrictions via a modified tenantid in the request path...

UBUNTU-CVE-2013-6426

The cloudformation-compatible API in OpenStack Orchestration API Heat before Havana 2013.2.1 and Icehouse before icehouse-2 does not properly enforce policy rules, which allows local in-instance users to bypass intended access restrictions and 1 create a stack via the CreateStack method or 2 upda...

CVE-2013-6426

The cloudformation-compatible API in OpenStack Orchestration API Heat before Havana 2013.2.1 and Icehouse before icehouse-2 does not properly enforce policy rules, which allows local in-instance users to bypass intended access restrictions and 1 create a stack via the CreateStack method or 2 upda...

UBUNTU-CVE-2013-6428

The ReST API in OpenStack Orchestration API Heat before Havana 2013.2.1 and Icehouse before icehouse-2 allows remote authenticated users to bypass the tenant scoping restrictions via a modified tenantid in the request path...

PT-2013-6043

Name of the Vulnerable Software and Affected Versions OpenStack Orchestration API Heat versions before Havana 2013.2.1 OpenStack Orchestration API Heat versions before Icehouse icehouse-2 Description The issue allows remote authenticated users to bypass tenant scoping restrictions. This is achiev...

PT-2013-6042

Name of the Vulnerable Software and Affected Versions OpenStack Orchestration API Heat versions prior to Havana 2013.2.1 OpenStack Orchestration API Heat versions prior to icehouse-2 Description The issue allows local in-instance users to bypass intended access restrictions. This can be achieved ...

Fedora Update for heat-jeos FEDORA-2013-9715

Check for the Version of heat-jeos OpenVAS Vulnerability Test Fedora Update for heat-jeos FEDORA-2013-9715 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Fedora Update for heat-jeos FEDORA-2013-9715

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : heat-jeos-9-1.fc19 (2013-9715)

Rebase to v9 to include locking root account fix Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 18 : heat-jeos-9-1.fc18 (2013-9708)

Rebase to v9 to include locking root account fix Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora Update for heat-jeos FEDORA-2013-9708

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scripttagname:"affected",...

Fedora Update for heat-jeos FEDORA-2013-9708

Check for the Version of heat-jeos OpenVAS Vulnerability Test Fedora Update for heat-jeos FEDORA-2013-9708 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

[SECURITY] Fedora 18 Update: heat-jeos-9-1.fc18

This is a project for creating Just Enough Operating System images for heat. This project supports the following features: - Creates TDL files for use with oz - Creates compressed qcow2 files for use with libvirt/glance - Registers image files with glance...

BloXor - A Metamorphic Block Based XOR Encoder

A Metamorphic Block Based XOR Encoder. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/encoder/bloxor/bloxor' BloXor is a cross architecture metamorphic block based xor encoder/decoder for Metasploit...

NIBE Heat Pump Remote Command Execution

!/usr/bin/python import socket,sys,os,base64 NIBE heat pump RCE exploit Written by Jelmer de Hen Published at http://h.ackack.net/?p=302 Web interface is running with root rights def fingerheatpumpip, port: s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.connectip, port s.send"GET /...

NIBE Heat Pump Local File Inclusion

!/usr/bin/python import socket,sys,os,base64 NIBE heat pump LFI exploit Written by Jelmer de Hen Published at http://h.ackack.net/?p=302 Special thanks to Fredrik Nordberg Almroth and Mathias Karlsson for obtaining this information http://h.ackack.net/?p=274 which made me test the heat pumps and...

NIBE Heat Pump RCE Exploit

Exploit for hardware platform in category remote exploits ========================== NIBE Heat Pump RCE Exploit ========================== !/usr/bin/python import socket,sys,os,base64 NIBE heat pump RCE exploit Written by Jelmer de Hen Published at http://h.ackack.net/?p=302 Web interface is...

NIBE heat pump LFI Exploit

Exploit for hardware platform in category remote exploits ========================== NIBE heat pump LFI Exploit ========================== !/usr/bin/python import socket,sys,os,base64 NIBE heat pump LFI exploit Written by Jelmer de Hen Published at http://h.ackack.net/?p=302 Special thanks to...

NIBE heat pump - Local File Inclusion

NIBE heat pump - Local File Inclusion !/usr/bin/python import socket,sys,os,base64 NIBE heat pump LFI exploit Written by Jelmer de Hen Published at http://h.ackack.net/?p=302 Special thanks to Fredrik Nordberg Almroth and Mathias Karlsson for obtaining this information http://h.ackack.net/?p=274...