Phabricator: SSRF vulnerability (access to metadata server on EC2 and OpenStack)

In bug 50537, haquaman reported a SSRF vulnerability in the meme creation section of Phabricator. Ticket T6755 was created and the HackerOne issue was closed as "Won't fix". T6755 states that "attackers can use the machine's ability to access the network, which may allow them to find services and...

Oracle NoSQL 11g 1.1.100 R2 - 'log' Parameter Directory Traversal Vulnerability

Exploit for java platform in category web applications source: http://www.securityfocus.com/bid/50567/info Oracle NoSQL is prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain...

MongoDB management tool exposure remote code execution vulnerability-vulnerability warning-the black bar safety net

MongoDB, the IT sector mainstream non-relational database NoSQL platform is one that is based on a table of a relational database of the popular alternatives. Recently, the management for MongoDB is a GUI tool phpMoAdmin is the storm has a very serious security vulnerability, once exploited, this...

phpMoAdmin - MongoDB unauthenticated remote execution 0day authomatic exploit

This is an unauthenticated remote execution 0day exploit coded by sp1nlock phpMoAdmin is a web interface for mongodb databases, is like phpmyadmin but for this nosql bigdata oriented database named MongoDB. Usage Info ./phpmohack.py url cmd ex: ./phpmohack.py http://test.com/path/ 'ls -l' This is...

40,000 UnProtected MongoDB Databases Found on the Internet

Nearly 40,000 organisations running MongoDB, a NoSQL high performance and cross-platform document-oriented database, are found to be unprotected and vulnerable to hackers. Three students from University of Saarland in Germany at the Centre for IT Security – Kai Greshake, Eric Petryka and Jens...

Trying to hack Redis via HTTP requests-vulnerability warning-the black bar safety net

0x01 scenario We assume that there is a SSRF vulnerability or a misconfigured proxy server, so that the attacker via HTTP requests to directly access the Redis service. In the above assumptions of the two cases, ask us for the HTTP request to access at least one line is fully controllable, this...

MongoDB NoSQL Collection Enumeration Via Injection Exploit

This module can exploit NoSQL injections on MongoDB versions less than 2.4 and enumerate the collections available in the data via boolean injections. Usage Info msf use auxiliary/gather/mongodbjsinjectcollectionenum msf auxiliarymongodbjsinjectcollectionenum show actions ...actions... msf...

Nosql-Exploitation-Framework - A FrameWork For NoSQL Scanning and Exploitation Framework

A FrameWork For NoSQL Scanning, Enumeration and Exploitation. NoSQL Databases are schema less databases. They were invented to store data easily and flexibly. NoSQL Databases have gained popularity and its security has always been under the scanner. The NoSQL Exploitation Framework focuses...

MongoDB NoSQL Collection Enumeration Via Injection

This module can exploit NoSQL injections on MongoDB versions less than 2.4 and enumerate the collections available in the data via boolean injections. Module Options msf use auxiliary/gather/mongodb/jsinjectcollectionenum msf undefinedjsinjectcollectionenum show actions ...actions... msf...

Moderate: Red Hat Security Advisory: mongodb security update

Updated mongodb packages that fix one security issue are now available for Red Hat Enterprise Linux OpenStack Platform 4.0. The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Automated NoSQL Database Injection Attacks: NoSQLMap

NoSQLMap is an open source Python tool designed to audit for as well as automate injection attacks and exploit default configuration weaknesses in NoSQL databases as well as web applications using NoSQL in order to disclose data from the database. It is named as a tribute to Bernardo Damele and...

[NOSQLMap] NoSQLMap-Automated NoSQL Database pwnage

What is NoSQLMap? NoSQLMap is an open source Python tool designed to audit for as well as automate injection attacks and exploit default configuration weaknesses in NoSQL databases, as well as web applications using NoSQL in order to disclose data from the database. It is named as a tribute to...

Important: Red Hat Security Advisory: mongodb and pymongo security and enhancement update

Updated mongodb and pymongo packages that fix two security issues and add one enhancement are now available for Red Hat Enterprise MRG 2.3 for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring...

MongoDB 任意代码执行漏洞(CVE-2013-4142)

CVE ID:CVE-2013-4142 MongoDB是一个高性能，开源，无模式的文档型数据库，是当前NoSql数据库中比较热门的一种 MongoDB "mongo::mongoFind"函数src/mongo/scripting/v8db.cpp在解析规则表达式时存在一个安全漏洞，允许对MongoDB数据库进行读写访问的用户执行任意代码，拥有只读访问权限的用户可使数据库崩溃。目前还不确定是否是2.2.3版本引入使用的V8 JavaScript引擎而引起的问题 0 MongoDB 2.4.0-2.4.4 厂商解决方案 MongoDB 2.4.5或2.5.1已经修复此漏洞，建议用户下载更...

MongoDB engine_spidermonkey.cpp nativeHelper.apply函数任意代码执行漏洞

MongoDB是一个高性能，开源，无模式的文档型数据库，是当前NoSql数据库中比较热门的一种 MongoDB nativeHelper.apply函数enginespidermonkey.cpp存在一个安全漏洞，允许远程攻击者利用漏洞通过run方法执行任意代码 0 MongoDB 2.4.0 厂商解决方案 MongoDB 2.4.1已经修复此漏洞，建议用户下载更新： http://www.mongodb.org/...

[ppt] "Удар по MongoDB" ZeroNights'12

Моя презентация с ZN. Описание: Цитата: Сейчас все чаще и чаще программисты используют NoSQL базы данных, для различных приложений. Методы атак на NoSQL еще мало изучены и не так распространены как обычные SQL injections. В докладе рассмотрены ранее не публиковавшиеся методы атак на базу данных...

Thousand Bo enterprise website management system HitCount. Asp page injection vulnerability-vulnerability warning-the black bar safety net

Program have joined the anti-injection code, in NoSql. asp file 7kccopyd-code % If EnableStopInjection = True Then Dim FyPost, FyGet, FyIn, FyInf, FyXh, Fydb, Fydbstr FyIn = "’|;|and|exec|insert|select|delete|update|count||%|chr|mid|master|truncate|char|declare" FyInf = SplitFyIn, "|" If Request...

Google V8 Server-Side JavaScript Injection joins the set of web application security vulnerabilitie

No description provided by source. Google V8 Server-Side JavaScript Injection joins the set of web application security vulnerabilities TIME-BASED PHP V8JS INJECTION & NOSQL/SSJS INJECTION Detecting server-side JavaScript SSJS injection vulnerabilities using time-based techniques. Article by Feli...

Oracle NoSQL 11g 1.1.100 R2 - 'log' Directory Traversal

source: https://www.securityfocus.com/bid/50567/info Oracle NoSQL is prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain arbitrary local files in the context of the webserver...

Oracle NoSQL 11g 1.1.100 R2 - log Directory Traversal

Oracle NoSQL 11g 1.1.100 R2 - log Directory Traversal source: https://www.securityfocus.com/bid/50567/info Oracle NoSQL is prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain...