Lucene search
+L

8620 matches found

The Coalfire Blog
The Coalfire Blog
added 2015/10/01 4:31 p.m.8 views

Chip Cards Finally Come to America – But What Does it Mean for Merchants and Consumers?

Like it or not, today the U.S. finally adopts EMV technology. While the implementation by most major retailers and large U.S. banks is expected to be delayed, the "chip and PIN" card types are coming to America to stay. The real debate is, will EMV adoption do anything for card data security?...

1.7AI score
SaveExploits0
The Hacker News
The Hacker News
added 2015/10/01 1:22 a.m.20 views

Chip-and-PIN Credit Cards and The Deadline: Here's What You need To Know

October 1 Liability shift ENDS! Today, 1st October 2015, is the deadline for US-based Banks and Retailers to roll out Chip-embedded Credit Cards powered by EVM Technology to customers that will make transactions more secure. EVM Technology stands for Europay, MasterCard and Visa -- a global...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2015/09/30 12:00 a.m.13 views

Rakuten card for iOS Security Bypass Vulnerability

Rakuten card for iOS is a suite of iOS-based Rakuten card expense management applications from Rakuten Japan. A security bypass vulnerability exists in Rakuten card for iOS versions 5.2.0 through 5.2.4. An attacker could exploit the vulnerability to conduct a man-in-the-middle attack and spoof th...

7.4CVSS6.6AI score0.01026EPSS
SaveExploits0References1
ThreatPost
ThreatPost
added 2015/09/28 1:42 p.m.18 views

Hotel Chain Hilton Worldwide Investigating Potential POS Breach

Hilton Hotels and Resorts is reportedly looking into claims that some of its point-of-sale devices were compromised, some potentially as far back as November 2014. Security blogger Brian Krebs notes that Visa sent alerts to financial institutions warning of a breach from April 21 to July 27, but...

7.1AI score
SaveExploits0References2
myhack58
myhack58
added 2015/09/28 12:00 a.m.42 views

360MarvelTeam virtualization vulnerabilities the second bomb: CVE-2 0 1 5-5 2 7 9 vulnerability analysis-vulnerability warning-the black bar safety net

Cloud computing has now become a by most Internet companies to accept the service mode, it provides customized hardware resources, applications, and services. As the implementation of the cloud computing concept the most important technical cornerstone, the virtualization system provides hardware...

0.1AI score
SaveExploits0
myhack58
myhack58
added 2015/09/27 12:00 a.m.21 views

360MarvelTeam virtualization vulnerabilities the second bomb - CVE-2 0 1 5-5 2 7 9 vulnerability analysis-vulnerability warning-the black bar safety net

0x01 vulnerability basics CVE-2 0 1 5-5 2 7 9 is a qemu virtualized environment rtl8029 network card device there is a stack overflow type of vulnerability. So what is the qemu software? qemu software, and kvm virtualization there is what kind of relationship? rtl8029 network card what is a devic...

7.9AI score
SaveExploits0
myhack58
myhack58
added 2015/09/10 12:00 a.m.19 views

WhatsApp aeration WEB vCard vulnerability affects hundreds of millions of users-vulnerability warning-the black bar safety net

! Security firm Check Point found that, in a world with over seven million users of the social networking application WhatsApp there was a web vulnerability, as many as two billion users suffer from the impact. Vulnerability analysis The Web version of WhatsApp allows users on a PC on line access...

1.2AI score
SaveExploits0
Debian
Debian
added 2015/09/02 4:22 p.m.97 views

[SECURITY] [DSA 3349-1] qemu-kvm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3349-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 02, 2015 https://www.debian.org/security/faq -...

5CVSS1.1AI score0.13288EPSS
SaveExploits1
myhack58
myhack58
added 2015/09/01 12:00 a.m.19 views

The use of Paypal vulnerabilities hackers to steal all your property in the Intangible-vulnerability warning-the black bar safety net

! The Egyptian security researcher Ebrahim Hegazy in Paypal on the website find a key storage-typeXSSvulnerability that may allow an attacker to steal your login credentials, or even in plaintext format to steal user credit card information! About Paypal Paypal, the continent known as PayPal, are...

0.1AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2015/09/01 12:00 a.m.39 views

JVN#81207766: Rakuten card App for iOS fails to verify SSL server certificates

Rakuten card App for iOS provided by Rakuten Card Co., Ltd. fails to verify SSL server certificates. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the Software Update to the latest version according to the information provided ...

7.4CVSS7AI score0.01026EPSS
SaveExploits0
Hacker One
Hacker One
added 2015/08/30 6:43 a.m.28 views

X (Formerly Twitter): Highly wormable clickjacking in player card

Hi, I would like to report an issue where player card is vulnerable to clickjacking in certain browsers. This may result in something similar to XSS worm and many other critical damages. Details Twitter Player Card allows a website to embed a custom playerhtml into an iframe in a tweet. There are...

6.3AI score
SaveExploits0
ThreatPost
ThreatPost
added 2015/08/27 11:13 a.m.14 views

Target Says SEC Won't Pursue Enforcement Action as a Result of Data Breach

Target officials say that the Securities and Exchange Commission, one of several U.S. agencies investigating the massive data breach at the company in 2013, has decided not to punish Target as a result of the breach. The Target data breach is one of the larger such incidents ever. The breach...

0.7AI score
SaveExploits0References2
The Hacker News
The Hacker News
added 2015/08/27 2:27 a.m.18 views

PayPal Vulnerability Allows Hackers to Steal All Your Money

A critical security vulnerability has been discovered in the global e-commerce business PayPal that could allow attackers to steal your login credentials, and even your credit card details in unencrypted format. Egypt-based researcher Ebrahim Hegazy discovered a Stored Cross Site Scripting XSS...

5.3AI score
SaveExploits0
The Hacker News
The Hacker News
added 2015/08/19 8:04 p.m.16 views

Web.com Hacked! Credit Card information of 93,000 Customers Compromised

Web.com, a Florida-based web hosting company with up to 3.3 Million customers, has suffered a data breach and may have compromised personal information and credit card data belonging to 93,000 of its clients. The company on Tuesday confirmed that some unknown hackers had breached one of its...

6.6AI score
SaveExploits0
ThreatPost
ThreatPost
added 2015/08/19 3:30 p.m.15 views

Web.com Data Breach

Update Florida-based web hosting company Web.com on Tuesday announced that it had suffered a data breach and payment card and personal information belonging to 93,000 customers was accessed. The company did not say in a statement or press release whether the stolen data was encrypted, nor how it...

1AI score
SaveExploits0References2
The Hacker News
The Hacker News
added 2015/08/19 1:25 a.m.63 views

RaspBSD – FreeBSD distribution for Raspberry Pi

Raspberry Pi is gaining new heights by rapidly maturing as; after Microsoft made Windows 10 IoT core supporting the Raspberry Pi 2, now a new version FreeBSD operating system is also deployable on Raspberry Pi devices, called RaspBSD. FreeBSD Berkeley Software Distribution is an open source...

6.8AI score
SaveExploits0
The Hacker News
The Hacker News
added 2015/08/18 8:21 p.m.13 views

Ashley Madison Hackers Finally Released All the Stolen Data Online

Well, Cheaters are about to have a very Bad Night Today! Hackers who claimed to have stolen customers' data from Ashley Madison, the popular online casual sex and cheating website with a tagline "Life is short. Have an affair," recently leaked nearly 10GB of its users' personal data online. The...

6.5AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2015/08/18 12:00 a.m.35 views

FreeBSD : qemu, xen-tools -- QEMU leak of uninitialized heap memory in rtl8139 device model (f06f20dc-4347-11e5-93ad-002590263bf5)

The Xen Project reports : The QEMU model of the RTL8139 network card did not sufficiently validate inputs in the C+ mode offload emulation. This results in uninitialized memory from the QEMU process's heap being leaked to the domain as well as to the network. A guest may be able to read sensitive...

9.3CVSS7.1AI score0.13288EPSS
SaveExploits0References4
NVD
NVD
added 2015/08/12 2:59 p.m.21 views

CVE-2015-5165

The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors...

9.3CVSS7.2AI score0.13288EPSS
SaveExploits0References19
OSV
OSV
added 2015/08/12 2:59 p.m.13 views

CVE-2015-5165

The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors...

6.8AI score
SaveExploits0References37
Rows per page
Query Builder