Ubuntu 11.10 / 12.04 LTS : nova vulnerability (USN-1466-1)

It was discovered that, when defining security groups in Nova using the EC2 or OS APIs, specifying the network protocol e.g. 'TCP' in the incorrect case would cause the security group to not be applied correctly. An attacker could use this to bypass Nova security group restrictions. Note that...

PT-2012-6312

Name of the Vulnerable Software and Affected Versions Openstack Compute Nova versions 2011.3 through 2012.1 Description The issue allows remote authenticated users with certain permissions to cause a denial of service by consuming CPU and hard drive resources via a network request that triggers a...

USN-1466-1: Nova vulnerability

It was discovered that, when defining security groups in Nova using the EC2 or OS APIs, specifying the network protocol e.g. 'TCP' in the incorrect case would cause the security group to not be applied correctly. An attacker could use this to bypass Nova security group restrictions...

Fedora 17 : openstack-nova-2012.1-2.fc17 (2012-6273)

Sync up with Essex stable branch - Support more flexible guest image file injection - Enforce quota on security group rules CVE-2012-2101 - Provide startup scripts for the Essex VNC services - Provide a startup script for the separated metadata api service update to essex release Note that...

CVE-2012-2101

Openstack Compute Nova Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service CPU and hard drive consumption via a network request that triggers a large number of iptables rules...

php forge local file inclusion vulnerability-vulnerability warning-the black bar safety net

Code: ? php $page=$GETpage; include$page.'php'; ?& gt; You can use http://www.xxx.com/index.php?page=../etc/passwd http://www.xxx.com/index.php?page=../../../etc/passwd http://www.xxx.com/index.php?page=..../../etc/passwd Get more data: etc/profile etc/services the /etc/passwd /etc/shadow the...

Joomla Biitatemplateshop SQL Injection

. \ \ | | | / | \ | | / | \ \ / | |/ / / / \ | | \ |/ \ | | / /\ | \ | /\ / / / / / /// .ORG + Info================================================================= - Title : Joomla Component combiitatemplateshop SQL Injection Vulnerability - Author: BHG Security Group - Home :...

Sabadkharid SQL Injection

Exploit Title: sabadkharid SQLinjection Vulnerabilities Google Dork: Powered by Parsp.com - Date: 2011-sep-22 Author: s1nahack3r E-Mail ; [email protected] £££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££ / Sql Injection: http://Target/cart.php?shoppingcart&add2cart=1...

phpRS 2.8.1 Cross Site Scripting / SQL Injection

Exploit Title: phpRS Multiple Vulnerabilities Google Dork: powered by phpRS Date: 2011-sep-18 Author: iM4n Software Link: http://www.supersvet.cz/download.php Version: 2.8.1 Tested on: FreeBSD - Cent OS £££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££ / Cross Site...

spidaNews 1.0 news.php (id) SQL Injection Vulnerability

Exploit for php platform in category web applications ----------------------------Information------------------------------------------------ +Name : spidaNews V.1.0 SQL injection Vulnerability news.php id +Autor : Easy Laster +Date : 02.04.2011 +Script : spidaNews V.1.0 +Download :...

ilchClan 1.0.5 - regist.php SQL Injection

ilchClan 1.0.5 - regist.php SQL Injection -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- / \ \ \ \ | | | / / / // |/ | ' \ \ \ // / | | | | | | / / / |||| || \ \ Security Flaw in ilch clan 1.0.5 a,b,c,d,e,f! in regist.php /...

Trend Micro WebReputation API URI安全限制绕过漏洞

BUGTRAQ ID: 46864 Trend Micro WebReputation API是趋势科技网页声誉应用程序界面。 Trend Micro WebReputation API在实现上存在安全限制绕过漏洞，远程攻击者可利用此漏洞绕过下载机制中包含的过滤程序，下载恶意文件到受影响计算机。 Trend Micro WebReputation API 10.5 Trend Micro WebReputation API 0 厂商补丁： Trend Micro ----------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Albania Security Group Hack more than 1000 Facebook Pages In One day !

Albania Security Group Hack more than 1000 Facebook Pages In One day ! There are Four Admins In the Group : 1. Hacker Twilight 2. Akrepi Hacker 3. BombRun 4. WarBot They Spread a Hex Javascript on Facebook, Once Victim will run that ,it automatically add there email id as admin in all victims...

TheHackerNews and CyberArmy(India) Facebook Pages Hacked By Albania Security Group !

TheHackerNews and CyberArmyIndia Facebook Pages Hacked By Albania Security Group ! Link of pages : and https://www.facebook.com/cyberarmy.in Albania Security Group !! The Group is created by 4 members !! hacker twilight ,akrepi hacker , BombRun , WarBot ! They have hacked 300 facebook fan pages i...

Raja Natarajan Guestbook 1.0 - Local File Inclusion

Raja Natarajan GUestbook 1.0 Local File Inclusion Exploit App: http://sourceforge.net/projects/phpscript/files/phpscript/Raja%20Guestbook/guestbook1.0.zip/download Author: h0rd Vuln: http://127.0.0.1/guestbook/add.php?lang=../../../../../../../../../../../../../../../etc/passwd%00 Thx: cr4wl3r,...

[DCA-00017] LinkSys BEFSR41 Multiple Stored Xss

DCA-00017 LinkSys BEFSR41 Multiple Stored Xss Software/Hardware - LinkSys DSL Router BEFSR41 V2 Vendor Product Description - This Router will allow your computers to share a high-speed Internet connection as well as resources, including files and printers. Bug Description - Linksys does not...

Linksys BEFSR41 Cross Site Scripting

DCA-00017 LinkSys BEFSR41 Multiple Stored Xss Software/Hardware - LinkSys DSL Router BEFSR41 V2 Vendor Product Description - This Router will allow your computers to share a high-speed Internet connection as well as resources, including files and printers. Bug Description - Linksys does not...

Debian DSA-2135-1 : xpdf - several vulnerabilities

Joel Voss of Leviathan Security Group discovered two vulnerabilities in xpdf rendering engine, which may lead to the execution of arbitrary code if a malformed PDF file is opened. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

DSA-2135-1 xpdf - several vulnerabilities

Bulletin has no description...

MHP Downloadshop SQL Injection Vulnerability

Exploit for php platform in category web applications ----------------------------Information------------------------------------------------ +Name : MHP Downloadshop = SQL injection Vulnerability Proof of Concept +Autor : Easy Laster +Date : 17.12.2010 +Script : MHP Downloadshop +Demo...