Amazon S3 Uploadify Script - 'Uploadify.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/54170/info Amazon S3 Uploadify Script is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to upload...

Uploadify-amazon-s3 1.01 Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

uploadify-amazon-s3 Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

SuSE 11.1 Security Update : Samba (SAT Patch Number 6124)

"A remote code execution flaw in Samba has been fixed : - PIDL based autogenerated code uses client supplied size values which allows attackers to write beyond the allocated array size. CVE-2012-1182 Also the following bugs have been fixed : - Samba printer name marshalling problems. bnc722663 -...

Ubuntu: Security Advisory (USN-1305-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-4596

Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted 1 tarball or 2 manifest...

Directory traversal

Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted 1 tarball or 2 manifest...

Ubuntu 11.10 : nova vulnerability (USN-1305-1)

David Black discovered that Nova did not properly perform input validation during image registration. An attacker could exploit this by registering a crafted image using the EC2 API or S3/RegisterImage method and overwrite files as the nova user. Note that Tenable Network Security has extracted t...

USN-1305-1: Nova vulnerability

David Black discovered that Nova did not properly perform input validation during image registration. An attacker could exploit this by registering a crafted image using the EC2 API or S3/RegisterImage method and overwrite files as the nova user...

CVE-2011-4596

Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted 1 tarball or 2 manifest...

Researchers Find SpyEye Operations Hosted on Amazon's S3

Cybercriminals are increasingly turning to cloud storage services to distribute their malware, and not just the free ones, according to virus researchers at Kaspersky Lab. According to a new post on Securelist, Kaspersky’s research blog, cybercriminals have been using Amazon’s Simple Storage...

Amazon S3 Information Disclosure

I'm not sure if this is the right channel, but I stumbled upon this while trying to manage some of my own files. Although I didn't to get anything further than a list, I'm guessing there's a lot more than could be done. This is an Amazon S3 bucket exploit/bug. Requirement: Have an amazon s3 accou...

Unfixed XSS vulnerability at s3.gladiatus.org

Security researcher Uber0n, has submitted on 14/06/2008 a cross-site-scripting XSS vulnerability affecting s3.gladiatus.org, which at the time of submission ranked 32792 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/06/2009. It is currentl...

Unfixed XSS vulnerability at s3.shinystat.com

Security researcher Uber0n, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting s3.shinystat.com, which at the time of submission ranked 5864 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is currently...

Unfixed XSS vulnerability at s3.accesoperu.com

Security researcher Norehem, has submitted on 08/08/2007 a cross-site-scripting XSS vulnerability affecting s3.accesoperu.com, which at the time of submission ranked 152195 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/08/2007. It is...

Unfixed XSS vulnerability at s3.gladiatus.net

Security researcher THE-SH0CK-B0Y, has submitted on 05/07/2007 a cross-site-scripting XSS vulnerability affecting s3.gladiatus.net, which at the time of submission ranked 174969 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2007. It is...

CVE-2007-2053

Multiple stack-based buffer overflows in AFFLIB before 2.2.6 allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via 1 a long LastModified value in an S3 XML response in lib/s3.cpp; 2 a long a path or b bucket in an S3 URL in lib/vnodes3.cpp; or 3 a long c...

Format string

Multiple format string vulnerabilities in AFFLIB 2.2.6 allow remote attackers to execute arbitrary code via certain command line parameters, which are used in 1 warn and 2 err calls, possibly involving a lib/s3.cpp, b tools/afconvert.cpp, c tools/afcopy.cpp, d tools/afinfo.cpp, e aimage/imager.cp...

Stack overflow

Multiple stack-based buffer overflows in AFFLIB before 2.2.6 allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via 1 a long LastModified value in an S3 XML response in lib/s3.cpp; 2 a long a path or b bucket in an S3 URL in lib/vnodes3.cpp; or 3 a long c...

Format string

Multiple format string vulnerabilities in AFFLIB before 2.2.6 allow remote attackers to execute arbitrary code via certain command line parameters, which are used in 1 warn and 2 err calls in a lib/s3.cpp, b tools/afconvert.cpp, c tools/afcopy.cpp, d tools/afinfo.cpp, e aimage/aimage.cpp, f...