[SECURITY] Fedora 20 Update: fldigi-3.21.83-2.fc20

Fldigi is a modem program which supports most of the digital modes used by ham radio operators today. You can also use the program for calibrating your sound card to WWV or doing a frequency measurement test. The program also c omes with a CW decoder. fldigi is written with the help of the Fast...

Inxi - A newer, better system information script for irc, administration, and system troubleshooters

A newer, better system information script for irc, administration, and system troubleshooters. Inxi Options Inxi has a wide range of options and custom triggers, along with useful defaults like -b or -F. Plain inxi, no options, prints a single line of basic system information. Here is a screensho...

Point-of-Sale Dealers Need a Security Sit-Down

The travails of small retail and hospitality businesses struggling with hackers have been documented for years in the annual Verizon Data Breach Investigations Report. Mom-and-pop businesses, small restaurants and regional hotel chains are perfect targets of opportunity for attackers adept at...

CVE-2014-3321

Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices, when bridge-group virtual interface BVI routing is enabled, allows remote attackers to cause a denial of service chip and card hangs via a series of crafted MPLS packets, aka Bug ID CSCuo91149...

ExpressionEngine: Cross Site Scripting (Stored)

Occurred in the URL : https://store.ellislab.com/billing After adding a product to the cart proceed to add the billing and card information and in the card fields give your card details respectively and in the fields 1. First name 2. Last name 3. Street Address 4. Apt/Suite/ 5. City. Give the...

Cisco IOS XR Software MPLS Packet Denial of Service Vulnerability

A vulnerability in parsing crafted Multiprotocol Label Switching MPLS packets in Cisco IOS XR Software for ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, adjacent attacker to cause a lockup and eventual reload of a network processor chip and a line card processing...

CVE-2014-3991

Multiple cross-site scripting XSS vulnerabilities in Dolibarr ERP/CRM 3.5.3 allow remote attackers to inject arbitrary web script or HTML via the 1 dolusejmobile, 2 doloptimizesmallscreen, 3 dolnomousehover, 4 dolhidetopmenu, 5 dolhideleftmenu, 6 mainmenu, or 7 leftmenu parameter to index.php; th...

CVE-2014-3991

Multiple cross-site scripting XSS vulnerabilities in Dolibarr ERP/CRM 3.5.3 allow remote attackers to inject arbitrary web script or HTML via the 1 dolusejmobile, 2 doloptimizesmallscreen, 3 dolnomousehover, 4 dolhidetopmenu, 5 dolhideleftmenu, 6 mainmenu, or 7 leftmenu parameter to index.php; th...

BrutPOS Botnet Compromises insecure RDP Servers at Point-of-Sale Systems

Cyber criminals are infecting thousands of computers around the world with malware and are utilizing those compromised machines to break into Point-of-Sale PoS terminals using brute-force techniques, and the attackers have already compromised 60 PoS terminals by brute-force attacks against...

Paypal BBP #108 MOS - Persistent Web Vulnerability

Document Title: =============== Paypal BBP 108 MOS - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1049 PayPal Security UID: qw115bSN Release Date: ============= 2014-07-07 Vulnerability Laboratory ID VL-ID:...

Remote Access Hack Compromises POS Vendor

A popular point of sale vendor may have suffered a data breach earlier this year that could affect customers of a handful of Pacific Northwest restaurants. Vancouver, Wash.-based Information Systems & Supplies, a supplier of POS systems to restaurants such as Dairy Queen, Buffalo Wild Wings and...

DC Scripts DCShop Beta 1.0 02 File Disclosure Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/2889/exploit DCShop is a GCI-based ecommerce system from DCScripts. Under certain configurations, a beta version of this product can allow a remote user to request and obtain files containing confidential order data,...

greeting card Remote Upload Vulnerability

No description provided by source. Exploit Title: greeting card Remote Upload Vulnerability Date: 04/06/2010 Author: Mr.Benladen Software Link: N/A Version: 2004/2008 Tested on: Linux/unix CVE : if exists Code : N/A Email : [email protected] Mr.Benladen cr3w Dork : Send amazing greetings to yo...

ig shop 1.0 (eval/SQL Injection) Multiple Vulnerabilities

No description provided by source. If eval is the answer, then you are asking the wrong question. --Unknowen ig-shop suffers from two eval's that can be controlled by an attacker: http://127.0.0.1/igshop/cart.php?action=;phpinfo;// ./cart.php line 692: eval cart$action;;...

CitrusDB 0.1/0.2/0.3 Credit Card Data Remote Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12402/info A remote information disclosure issue affects CitrusDB. This issue is due to a design problem that grants unauthorized users the ability to export sensitive data. An attacker may leverage this issue to gain...

GotoCode Online Bookstore Multiple Vulnerabilities

No description provided by source. Exploit Title : GotoCode Online Bookstore Multiple Vulnerabilities Vulnerability : Privilege Escalation / Remote Database Download Date : 03/10/2011 Author : Nathaniel Carew Email : [email protected] Impact : High Software Link :...

NetGear MA521 Wireless Driver 5.148.724 Long Beacon Probe Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/21175/info NetGear MA521 Wireless device is prone to a stack-based buffer-overflow vulnerability because the driver fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory...

Greeting card 1.1 - SQL Injection Vulnerability

No description provided by source...

APC Network Management Card Cross Site Request Forgery and Cross Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/37338/info The APC Network Management Card is prone to multiple cross-site request-forgery and cross-site scripting vulnerabilities. An attacker can exploit the cross-site request forgery issues to alter the settings on...

leadtools activex common dialogs 16.5 - Multiple Vulnerabilities

No description provided by source. LEADTOOLS ActiveX Common Dialogs 16.5 Multiple Remote Vulnerabilities Vendor: LEAD Technologies, Inc. Product Web Page: http://www.leadtools.com Affected version: 16.5.0.2 Summary: With LEADTOOLS you can control any scanner, digital camera or capture card that h...