Trump Hotels Hit By 3rd Card Breach in 2 Years

Maybe some of you missed this amid all the breach news recently I know I did, but Trump International Hotels Management LLC last week announced its third credit-card data breach in the past two years. I thought it might be useful to see these events plotted on a timeline, because it suggests that...

The vulnerability of the gpkcsp.dll component in Windows operating systems’ Smart Card authentication code allows a perpetrator to execute arbitrary code.

The vulnerability of the gpkcsp.dll component in Windows operating systems for smart card authentication is caused by a buffer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely assuming the computer is in a domain and remote administration is allow...

Eredan Arena - Card Battle TCG - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Eredan Arena - Card Battle TCG published at the 'play' market has multiple vulnerabilities...

Russian Financial Cybercriminal Gets Over 9 Years In U.S. Prison

A 29-year-old Russian-born, Los Angeles resident has been sentenced to over nine years in prison for running botnets of half a million computers and stealing and trafficking tens of thousands of credit card numbers on exclusive Russian-speaking cybercriminal forums. Alexander Tverdokhlebov was...

ABB VSN300 WiFi Logger Card

CVSS v3 7.5 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: ABB Equipment: VSN300 WiFi Logger Card Vulnerabilities: Improper Authentication; Permissions, Privileges, and Access Controls AFFECTED PRODUCTS The following versions of VSN300 WiFi Logger Card, a device for solar...

Self-Service Food Kiosk Vendor Avanti Hacked

Avanti Markets, a company whose self-service payment kiosks sit beside shelves of snacks and drinks in thousands of corporate breakrooms across America, has suffered of breach of its internal networks in which hackers were able to push malicious software out to those payment devices, the company...

B&B Theatres Hit in 2-Year Credit Card Breach

B&B Theatres, a company that owns and operates the 7th-largest theater chain in America, says it is investigating a breach of its credit card systems. The acknowledgment comes just days after KrebsOnSecurity reached out to the company for comment on reports from financial industry sources who sai...

Corebox - External URLs, SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Corebox published at the 'play' market has multiple vulnerabilities...

ADC Utility - Dangerous filesystem permissions, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application ADC Utility published at the 'play' market has multiple vulnerabilities...

Bluetooth App loophole series analysis of the three CVE-2017-0645-vulnerability warning-the black bar safety net

0x01 vulnerability profile Android 6 months of security bulletins, at the same time also repair the we found a Bluetooth App mentioning the right to risk the vulnerability, the vulnerability allows the phone to local unprivileged malicious program constructed a counterfeit of the Provider and get...

The vulnerability of the Android operating system allows malicious actors to circumvent data privacy by bypassing the protection of the eMMC memory module when the device is powered on.

The vulnerability of the Android operating system relates to the protection against writing to the eMMC memory module. Exploiting this vulnerability allows a malicious actor to circumvent the protection against writing to the eMMC memory module when power is turned on...

peek.com XSS vulnerability

Vulnerable URL: https://www.peek.com/purchase/giftcard/594bef096b767f2106002d1b/finalize Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 72260 VIP website status:| Yes Coordinated...

Buffer overflow

A buffer overflow in Smart Card authentication code in gpkcsp.dll in Microsoft Windows XP through SP3 and Server 2003 through SP2 allows a remote attacker to execute arbitrary code on the target computer, provided that the computer is joined in a Windows domain and has Remote Desktop Protocol...

CVE-2017-0176

A buffer overflow in Smart Card authentication code in gpkcsp.dll in Microsoft Windows XP through SP3 and Server 2003 through SP2 allows a remote attacker to execute arbitrary code on the target computer, provided that the computer is joined in a Windows domain and has Remote Desktop Protocol...

CVE-2017-0176

A buffer overflow in Smart Card authentication code in gpkcsp.dll in Microsoft Windows XP through SP3 and Server 2003 through SP2 allows a remote attacker to execute arbitrary code on the target computer, provided that the computer is joined in a Windows domain and has Remote Desktop Protocol...

اضافات بلاك بيري - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application اضافات بلاك بيري published at the 'play' market has multiple vulnerabilities...

Credit Card Breach at Buckle Stores

The Buckle Inc., a clothier that operates more than 450 stores in 44 U.S. states, disclosed Friday that its retail locations were hit by malicious software designed to steal customer credit card data. The disclosure came hours after KrebsOnSecurity contacted the company regarding reports from...

creditcards.com XSS vulnerability

Vulnerable URL: http://www.creditcards.com/credit-cards/usaa-secured-card-platinum-visa-231210934.php?catid=1/-///'/"//--...

Microsoft Windows RDP Remote Code Execution Vulnerability (KB4022747)

This host is missing a critical security update according to Microsoft KB4022747 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Arbitrary File Download Vulnerability in Campus Card Portal of Harbin Xinzhongxin Electronics Co.

Campus Card Portal is a digital campus solution. An arbitrary file download vulnerability exists in the Campus Card Portal of Harbin Xinzhongxin Electronics Co. The vulnerability allows an attacker to download arbitrary files from the server...