CVE-2010-0407

Multiple buffer overflows in the MSGFunctionDemarshall function in winscardsvc.c in the PC/SC Smart Card daemon aka PCSCD in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via crafted message data, which is improperly demarshalled...

greeting card remote Upload File vulnerability-vulnerability warning-the black bar safety net

greeting card program the presence of a remote file upload vulnerability, a registered user login you can upload a php executable code. Google Dork : "Send amazing greetings to your friends and relative!" trojandownloader : http://127.0.0.1/upload.php First register and the site and go to upload...

[SECURITY] Fedora 12 Update: pcsc-lite-1.5.2-4.fc12

The purpose of PC/SC Lite is to provide a WindowsR SCard interface in a very small form factor for communicating to smartcards and readers. PC/SC Lite uses the same winscard API as used under WindowsR. This package includes the PC/SC Lite daemon, a resource manager that coordinates communications...

Greeting Card Remote Shell Upload

Exploit Title: greeting card Remote Upload Vulnerability Date: 04/06/2010 Author: Mr.Benladen Software Link: N/A Version: 2004/2008 Tested on: Linux/unix CVE : if exists Code : N/A Email : [email protected] Mr.Benladen cr3w Dork : "Send amazing greetings to your friends and relative!" exploit ...

greeting card - Arbitrary File Upload

Exploit Title: greeting card Remote Upload Vulnerability Date: 04/06/2010 Author: Mr.Benladen Software Link: N/A Version: 2004/2008 Tested on: Linux/unix CVE : if exists Code : N/A Email : [email protected] Mr.Benladen cr3w Dork : "Send amazing greetings to your friends and relative!" exploit ...

grering card Remote Upload Vulnerability

Exploit for php platform in category web applications ======================================== grering card Remote Upload Vulnerability ======================================== Exploit Title: grering card Remote Upload Vulnerability Date: 04/06/2010 Author: Mr.Benladen Software Link: N/A Version:...

Facebook Developer Verification Won't Stop Rogue Apps

Looking to clamp down on the escalation of malicious apps on its popular social network, Facebook will now require that every developer to verify their Facebook account by providing a mobile phone number or adding a credit card to their account. While this is clearly a step in the right direction...

New Tabbed Browsing Phishing Attack Exploits User Trust

A researcher has developed a new type of phishing attack that takes advantage of the way that browsers handle tabbed browsing and enables an attacker to use a script running in one tab to completely change the content in another tab. The attack, demonstrated by Aza Raskin of Mozilla, could be use...

Rich Mogull on Database Security and Encryption

Dennis Fisher talks with analyst Rich Mogull of Securosis about his new report on database encryption, the value and danger of storing credit-card data and why more companies don’t get rid of sensitive data more quickly. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground...

Joomla Card View JX Cross Site Scripting

Exploit Title: Joomla Component Card View JX XSS Vulnerabilities Date: 01.05.2010 Author: Valentin Category: webapps/0day Version: Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Joomla Componen...

Joomla! Component Card View JX - Cross-Site Scripting

Joomla! Component Card View JX - Cross-Site Scripting :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Joomla Component Card View JX XSS Vulnerabilities Author = Valentin Hoebel Contact = [email protected]...

Joomla Component Card View JX XSS Vulnerabilities

Exploit for php platform in category web applications ================================================= Joomla Component Card View JX XSS Vulnerabilities ================================================= :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General...

Joomla! Component Card View JX - Cross-Site Scripting

:::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Joomla Component Card View JX XSS Vulnerabilities Author = Valentin Hoebel Contact = [email protected] :::::::::::::::::::::::::::::::::::::: 0x2...

Blippy Accidentally Gives Up Credit Card Numbers

Blippy users recently got a taste of the social media fad’s dark side when simple Google searches turned up 127 transactions that included credit card numbers of four users. Read the full article. The Register...

Fake iPad, iPhone Giveaways Hit Twitter

Not surprisingly, spam using the Apple iPad as a lure to get users to give up personal or credit card information has began to make rounds of Twitter users. Read the full article. Help Net Security...

Whole Foods Fan Page Scam on Facebook

Upscale grocery conglomerate Whole Foods Market said it is continuing to clamp down on a series of Facebook-based scams that entice users with a purported $500 gift card from the Austin, Texas-based supermarket chain. Read the full article. CNet...

J.C. Penney Was 'Company A' in Breach Case

Retailer JC Penney fought to keep its name secret during court proceedings related to the largest breach of credit card data on record, according to documents recently unsealed. Read the full article. Computerworld...

Directory traversal

Directory traversal vulnerability in the Webesse E-Card wsecard extension 1.0.2 and earlier for TYPO3 has unspecified impact and remote attack vectors...

CVE-2009-4740

Directory traversal vulnerability in the Webesse E-Card wsecard extension 1.0.2 and earlier for TYPO3 has unspecified impact and remote attack vectors...

CVE-2009-4740

Summary: CVE-2009-4740 describes a directory traversal vulnerability in the Webesse E-Card (ws_ecard) extension for TYPO3, affecting version 1.0.2 and earlier. Affected software: TYPO3 environment with ws_ecard extension (version ≤ 1.0.2). Vulnerability details: Directory traversal via the ws_eca...