Ubuntu 12.04 LTS / 12.10 : glance vulnerability (USN-1764-1)

Stuart McLaren discovered an issue with Glance v1 API requests. An authenticated attacker could exploit this to expose the Glance operator's Swift and/or S3 credentials via the response headers when requesting a cached image. Note that Tenable Network Security has extracted the preceding...

Ubuntu Update for glance USN-1764-1

Check for the Version of glance OpenVAS Vulnerability Test $Id: gbubuntuUSN17641.nasl 8650 2018-02-03 12:16:59Z teissa $ Ubuntu Update for glance USN-1764-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software;...

Ubuntu: Security Advisory (USN-1764-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-1764-1: OpenStack Glance vulnerability

Stuart McLaren discovered an issue with Glance v1 API requests. An authenticated attacker could exploit this to expose the Glance operator's Swift and/or S3 credentials via the response headers when requesting a cached image...

Samsung S3 Full Lock Screen Bypass

====Title==== Samsung S3 : Full Lock Screen Bypass ========Summary======== It is possible to bypass the lock screen on the S3 allowing an indivdual full access to the phones features ==============Steps to recreate============== 1 On the code entry screen press Emergency Call2 Then press Emergenc...

Samsung Galaxy S3 partial screen-lock bypass

MTI Technology – Vulnerability Research Team www.mti.com ukpentestinfo"at"mti.com Samsung Galaxy S3 – partial screen-lock bypass Date found: 17th Feb 2012 Vendor Notified: 20th Feb 2012 Vendor Affected: Samsung Device: Galaxy S3 Model: GT-19300 OS: Android 4.1.2 Kernel Version: 3.0.31-742798...

Samsung Galaxy S3 screenlock bypass

Voice commands are available in locked state...

Samsung Galaxy S3 Screen-Lock Bypass

MTI Technology – Vulnerability Research Team www.mti.com ukpentestinfo"at"mti.com Samsung Galaxy S3 – partial screen-lock bypass Date found: 17th Feb 2012 Vendor Notified: 20th Feb 2012 Vendor Affected: Samsung Device: Galaxy S3 Model: GT-19300 OS: Android 4.1.2 Kernel Version: 3.0.31-742798...

Kies Air Denial Of Service / Authorization Bypass

Name: CVE-2012-5858 CVE-2012-5859 DoS/Authorization Bypass - Kies Air Package: com.samsung.swift.app.kiesair Affected versions: 2.1.207051, 2.1.210161 Testing Device: Samsung S3 AT&T - SAMSUNG-SGH-I747 Android Version: 4.0.4/ Build Number: IMM76D.I747UCALH9 Vendor homepage:...

New Android Exploit Could Force Factory Reset remotely

Clicking one wrong link can cause malicious code to execute, which could do anything from infecting your computer with malware to, apparently, wiping your phone data completely. At the Ekoparty security conference, researcher Ravi Borganokar demonstrated at the Ekoparty security conference in...

iPhone 4S Falls at Hacker Contest; New iPhone 5 Vulnerable to Same Exploit

Two security researchers have already chipped the armor of the new iPhone, scheduled for release tomorrow. Joost Pol and Daan Keuper won the mobile Pwn2Own contest yesterday at EUSecWest event in Amsterdam by compromising a fully patched iPhone 4S device and stealing contacts, browsing history,...

Android 4.0.4 multiple Zero-Day Vulnerabilities

The Samsung Galaxy S3 can be hacked via NFC, allowing attackers to download all data from the Android smartphone, security researchers demonstrated during the Mobile Pwn2Own contest in Amsterdam. Using a pair of zero day vulnerabilities, a team of security researchers from U.K.-based MWR Labs...

Facebook Timeline Eraser Chrome Plugins Dupe Tens of Thousands of Users

Nearly 100,000 Facebook users have been duped into installing third-party Chrome plugins over the past few weeks that have access to all of their data on every Web site they visit. According to research recently conducted by security firm Barracuda Networks, the unsuspecting users were tricked in...

Eucalyptus Walrus Detection

Eucalyptus Walrus, a Java application that implements an interface compatible with Amazon's S3, was found on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid61609; scriptversion"1.3"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"Eucalyptus Walr...

php.s3.to Upload Script Shell Upload

Explit Title : "PHP S3 TO" Remote File Upload Download : http://php.s3.to/script.php Author : MR.XpR Test on : LinuX R3dH4t Bug discovered by : IRANHACK SecuRITY TEAM + Exploit : ProtocolSite.CoM/dir/up/upload.php -------------------------------------------------------------- + Load files From :...

Amazon S3 Uploadify Script - Uploadify.php Arbitrary File Upload

Amazon S3 Uploadify Script - Uploadify.php Arbitrary File Upload source: https://www.securityfocus.com/bid/54170/info Amazon S3 Uploadify Script is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize...

Uploadify-amazon-s3 1.01 Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Amazon S3 Uploadify Script - 'Uploadify.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/54170/info Amazon S3 Uploadify Script is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to upload...

uploadify-amazon-s3 Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

SuSE 11.1 Security Update : Samba (SAT Patch Number 6124)

"A remote code execution flaw in Samba has been fixed : - PIDL based autogenerated code uses client supplied size values which allows attackers to write beyond the allocated array size. CVE-2012-1182 Also the following bugs have been fixed : - Samba printer name marshalling problems. bnc722663 -...