8558 matches found
Mandriva Update for drakx-net MDVA-2008:058 (drakx-net)
Check for the Version of drakx-net OpenVAS Vulnerability Test Mandriva Update for drakx-net MDVA-2008:058 drakx-net Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
CVE-2008-6622
SQL injection vulnerability in choosecard.php in WEBBDOMAIN Post Card aka Web Postcards 1.02, 1.01, and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2008-6623
SQL injection vulnerability in getin.php in WEBBDOMAIN Post Card aka Web Postcards 1.02 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter...
CVE-2008-6623
The CVE-2008-6623 entry describes an SQL injection flaw in WEBBDOMAIN Post Card (Web Postcards) 1.02 and earlier, exploitable via the username parameter in getin.php. Root cause is improper input handling leading to arbitrary SQL execution; remote attackers could potentially exploit it. The conne...
CVE-2008-6622
CVE-2008-6622 is a SQL injection vulnerability in WEBBDOMAIN Post Card (Web Postcards) 1.02, 1.01 and earlier, affecting choosecard.php. The underlying issue allows remote attackers to inject and execute arbitrary SQL commands through the catid parameter. The available references document the aff...
CVE-2008-6622
SQL injection vulnerability in choosecard.php in WEBBDOMAIN Post Card aka Web Postcards 1.02, 1.01, and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2008-6623
SQL injection vulnerability in getin.php in WEBBDOMAIN Post Card aka Web Postcards 1.02 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter...
Ori Eisen on Credit Card Fraud and the Need for a New Internet
Dennis Fisher talks with Ori Eisen, founder of 41st Parameter, about the roots of online fraud, how the credit card companies and banks could have done better and whether we need to start from scratch with a new Internet. Subscribe to the Digital Underground podcast on Podcast audio courtesy of...
Google search reveals 19,000 credit card details
By Carrie-Ann Skinner, PC Advisor The credit card details of 19,000 Brits that shopped online were freely available on Google, it has been revealed. Anyone using the search engine could have easily accessed not only the name and addresses of thousands infoworld.com of Visa, Mastercard and America...
[SECURITY] Fedora 9 Update: opensc-0.11.7-1.fc9
OpenSC is a package for for accessing smart card devices. Basic functionality e.g. SELECT FILE, READ BINARY should work on any ISO 7816-4 compatible smart card. Encryption and decryption using private keys on the smart card is possible with PKCS 15 compatible cards, such as the FINEID Finnish...
[SECURITY] Fedora 10 Update: opensc-0.11.7-1.fc10
OpenSC is a package for for accessing smart card devices. Basic functionality e.g. SELECT FILE, READ BINARY should work on any ISO 7816-4 compatible smart card. Encryption and decryption using private keys on the smart card is possible with PKCS 15 compatible cards, such as the FINEID Finnish...
iTunes gift card hack could be work of carders
Research by Joe Stewart, SecureWorks In response to published reports outdustry.com about a hacking attack appletell.com against the iTunes gift card system, security researcher Joe Stewart has gone digging for answers and comes up with an eyebrow-raising theory. Stewart believes this is the work...
Debian DSA-1734-1 : opensc - programming error
b.badrignans discovered that OpenSC, a set of smart card utilities, could stores private data on a smart card without proper access restrictions. Only blank cards initialised with OpenSC are affected by this problem. This update only improves creating new private data objects, but cards already...
RedHat Update for kernel RHSA-2008:0885-01
Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2008:0885-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
[SECURITY] [DSA 1734-1] New opensc packages fix information disclosure
------------------------------------------------------------------------ Debian Security Advisory DSA-1734-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst March 05, 2009 http://www.debian.org/security/faq -...
CVE-2009-0809
The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remote authenticated users to read the profile card of an object in the document class via a link that is sent from the owner of the document object...
Design/Logic Flaw
The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remote authenticated users to read the profile card of an object in the document class via a link that is sent from the owner of the document object...
Cambridge researchers slam banking card readers
The Register is reporting on a new study by Cambridge security researchers that show that card readers for online banking are inherently insecure. Researchers Saar Drimer, Steven J Murdoch and Ross Anderson found a number of serious security shortcomings after reverse engineering the underlying...
Will the real [Breach X] please stand up?
Do you remember that classic game show “To Tell the Truth?” It was great and trying to figure out who was the “real” person was always a challenge. Unfortunately Visa and MasterCard are making all of us play the same game of late. There have been recent rumors running rampant alliteration anyone?...