PHPmongoDB 1.0.0 - Multiple Vulnerabilities

PHPmongoDB 1.0.0 - Multiple Vulnerabilities Exploit Title: PHPmongoDB v1.0.0 - Multiple Vulnerabilities CSRF | HTMLor Iframe Injection | XSS Reflected & Stored Date: 14.04.2016 Exploit Author: Ozer Goker Vendor Homepage: http://www.phpmongodb.org Software Link:...

RockMongo 1.1.8 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: RockMongo v1.1.8 - PHP MongoDB Administrator Multiple Vulnerabilities Date: 11.04.2016 Exploit Author: Ozer Goker Vendor Homepage: http://rockmongo.com Software Link: https://github.com/iwind/rockmongo Version: app version 1.1.8 What is RockMongo? RockMongo, a MongoDB administratio...

RockMongo PHP MongoDB Administrator 1.1.8 - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: RockMongo v1.1.8 - PHP MongoDB Administrator Multiple Vulnerabilities Date: 11.04.2016 Exploit Author: Ozer Goker Vendor Homepage: http://rockmongo.com Software Link: https://github.com/iwind/rockmongo Version: app version 1.1.8...

RockMongo PHP MongoDB Administrator 1.1.8 - Multiple Vulnerabilities

Exploit Title: RockMongo v1.1.8 - PHP MongoDB Administrator Multiple Vulnerabilities Date: 11.04.2016 Exploit Author: Ozer Goker Vendor Homepage: http://rockmongo.com Software Link: https://github.com/iwind/rockmongo Version: app version 1.1.8 What is RockMongo? RockMongo, a MongoDB administratio...

RockMongo PHP MongoDB Administrator 1.1.8 - Multiple Vulnerabilities

RockMongo PHP MongoDB Administrator 1.1.8 - Multiple Vulnerabilities Exploit Title: RockMongo v1.1.8 - PHP MongoDB Administrator Multiple Vulnerabilities Date: 11.04.2016 Exploit Author: Ozer Goker Vendor Homepage: http://rockmongo.com Software Link: https://github.com/iwind/rockmongo Version: ap...

Stolen Data on 1.5 Million Verizon Enterprise Customers Up for Sale

Verizon is in the process of notifying customers of its Enterprise Solutions division that their data has been breached. The news comes a few days after a treasure trove of information on 1.5 million Verizon Enterprise customers reportedly made its way onto an underground cybercrime forum,...

DbDat - Db Database Assessment Tool

DbDat performs numerous checks on a database to evaluate security. The categories of checks performed are configuration, privileges, users, and information. Checks are performed by running queries or reading database configuration files. The goal of this tool is to highlight issues that need...

MongoDB 2.4.x < 2.4.13 / 2.6.x < 2.6.8 / 3.0.x < 3.0.0-rc9 mongod BSON DoS

The version of the remote MongoDB server is 2.4.x prior to 2.4.13 or 2.6.x prior to 2.6.8 or 3.0.x prior to 3.0.0-rc9. It is, therefore, affected by a denial of service vulnerability in mongod due to improper validation of BSON messages. A remote, unauthenticated attacker can exploit this, via a...

NoSQLMap v0.6 - Automated NoSQL Database Pwnage

NoSQLMap is an open source Python tool designed to audit for as well as automate injection attacks and exploit default configuration weaknesses in NoSQL databases, as well as web applications using NoSQL in order to disclose data from the database. It is named as a tribute to Bernardo Damele and...

[SECURITY] Fedora 22 Update: python-pymongo-2.5.2-8.fc22

The Python driver for MongoDB...

[SECURITY] Fedora 23 Update: python-pymongo-2.5.2-8.fc23

The Python driver for MongoDB...

Database Assessment Tool: DbDat

DbDat performs numerous checks on a database to evaluate security. The categories of checks performed are configuration, privileges, users, and information. Checks are performed by running queries or reading database configuration files. The goal of this tool is to highlight issues that need...

Debian Security Advisory DSA 3441-1 (perl - security update)

David Golden of MongoDB discovered that File::Spec::canonpath in Perl returned untainted strings even if passed tainted input. This defect undermines taint propagation, which is sometimes used to ensure that unvalidated user input does not reach sensitive code. The oldstable distribution wheezy i...

DSA-3441-1 perl - security update

Bulletin has no description...

p5-PathTools -- File::Spec::canonpath loses taint

Ricardo Signes reports: Beginning in PathTools 3.47 and/or perl 5.20.0, the File::Spec::canonpath routine returned untained strings even if passed tainted input. This defect undermines the guarantee of taint propagation, which is sometimes used to ensure that unvalidated user input does not reach...

13 Million MacKeeper Users Hacked — 21 GB of Data Exposed

MacKeeper anti-virus company is making headlines today for its lax security that exposed the database of 13 Million Mac users' records including names, email addresses, usernames, password hashes, IP addresses, phone numbers, and system information. MacKeeper is a suite of software that claims to...

CVE-2015-2328

PCRE before 8.36 mishandles the /?Ra|?1+/ pattern and related patterns with certain recursion, which allows remote attackers to cause a denial of service segmentation fault or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object...

CVE-2015-2327

PCRE before 8.36 mishandles the /a\2|a\g/ pattern and related patterns with certain internal recursive back references, which allows remote attackers to cause a denial of service segmentation fault or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a...

[SECURITY] Fedora 23 Update: php-doctrine-cache-1.4.2-1.fc23

Cache component extracted from the Doctrine Common project. Optional: APC php-pecl-apc Couchbase http://pecl.php.net/package/couchbase Memcache php-pecl-memcache Memcached php-pecl-memcached MongoDB php-pecl-mongo Redis php-pecl-redis Riak http://pecl.php.net/package/riak XCache php-xcache...

[SECURITY] Fedora 22 Update: php-doctrine-cache-1.4.2-1.fc22

Cache component extracted from the Doctrine Common project. Optional: APC php-pecl-apc Couchbase http://pecl.php.net/package/couchbase Memcache php-pecl-memcache Memcached php-pecl-memcached MongoDB php-pecl-mongo Redis php-pecl-redis Riak http://pecl.php.net/package/riak XCache php-xcache...