Persistent, Covert Malware Causing Major Damage

LAS VEGAS–Security technology and practice have advanced quite a bit in the past few years, but one thing that has become clear is that whatever gains have been made are just not keeping pace with the innovation of attackers. The advances being made by malware authors and crimeware gangs are...

SA-CONTRIB-2010-077 - Sage Pay (former Protx) Direct Payment Gateway for Ubercart - Information Disclosure

The Sage Pay Direct Payment Gateway for Ubercart ucprotxvspdirect processes credit card transactions in Ubercart stores using the Sage Pay Direct service. The module may show remote 3-D Secure pages to the user in an iframe when their bank supports the Verified by Visa or MasterCard SecureCode...

RHEL 5 : pcsc-lite (RHSA-2010:0533)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0533 advisory. - pcsc-lite: Privilege escalation via specially-crafted client to PC/SC Smart Card daemon messages CVE-2009-4901, CVE-2010-0407 Note that...

Fedora Update for pcsc-lite FEDORA-2010-10764

Check for the Version of pcsc-lite OpenVAS Vulnerability Test Fedora Update for pcsc-lite FEDORA-2010-10764 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

pcsc-lite: Privilege escalation via specially-crafted client to PC/SC Smart Card daemon messages

The MSGFunctionDemarshall function in winscardsvc.c in the PC/SC Smart Card daemon aka PCSCD in MUSCLE PCSC-Lite before 1.5.4 might allow local users to cause a denial of service daemon crash via crafted SCARDSETATTRIB message data, which is improperly demarshalled and triggers a buffer over-read...

pcsc-lite: Privilege escalation via specially-crafted client to PC/SC Smart Card daemon messages

Multiple buffer overflows in the MSGFunctionDemarshall function in winscardsvc.c in the PC/SC Smart Card daemon aka PCSCD in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via crafted message data, which is improperly demarshalled...

[SECURITY] Fedora 12 Update: pcsc-lite-1.5.2-5.fc12

The purpose of PC/SC Lite is to provide a WindowsR SCard interface in a very small form factor for communicating to smartcards and readers. PC/SC Lite uses the same winscard API as used under WindowsR. This package includes the PC/SC Lite daemon, a resource manager that coordinates communications...

Credit Card System of Destination Hotels Hacked

Guests who recently stayed at Destination Hotels & Resorts may have been victimized by compromised point-of-sale systems. The company refused to release many details of the incident citing an ongoing investigation by the FBI. In a note posted to its Web site said that it had “uncovered a maliciou...

Custom Business Card Script SQL Injection

Exploit Title: Custom Business Card script SQL injection Vulnerability Date: 23/06/2010 Author: JaMbA Script url: http://www.2daybiz.com/custombusscardscript.html Version: N/A Tested on: Windows CVE : ::::::::::::::::::::::::: ::::::::::::::::::::::::: =================Exploit====== ============...

Greetring Card SQL Injection

Greetring card SQL Injection Vulnerability articlesdetails.php?id Author : CoBRa21 Script Home : null Dork : "Send amazing greetings to your friends and relative!" Sql Injection: http://localhost/path/articlesdetails.php?id=1' SQL Yeni Windows 7: Gündelik işlerinizi basitleştirin. Size en uygun...

Custom Business Card script - SQL Injection

Custom Business Card script - SQL Injection Exploit Title: Custom Business Card script SQL injection Vulnerability Date: 23/06/2010 Author: JaMbA Script url: http://www.2daybiz.com/custombusscardscript.html Version: N/A Tested on: Windows CVE : ::::::::::::::::::::::::: :::::::::::::::::::::::::...

Custom Business Card script - SQL Injection

Exploit Title: Custom Business Card script SQL injection Vulnerability Date: 23/06/2010 Author: JaMbA Script url: http://www.2daybiz.com/custombusscardscript.html Version: N/A Tested on: Windows CVE : ::::::::::::::::::::::::: ::::::::::::::::::::::::: =================Exploit====== ============...

Custom Business Card script SQL injection Vulnerability

Exploit for php platform in category web applications ======================================================= Custom Business Card script SQL injection Vulnerability ======================================================= Exploit Title: Custom Business Card script SQL injection Vulnerability Date...

Grering card SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================== Grering card SQL Injection Vulnerability ======================================== Title : Grering card SQL Injection Vulnerability Author : Net.Edit0r Location : Iran Dork : "Send amazing greetings to...

CVE-2009-4901

The MSGFunctionDemarshall function in winscardsvc.c in the PC/SC Smart Card daemon aka PCSCD in MUSCLE PCSC-Lite before 1.5.4 might allow local users to cause a denial of service daemon crash via crafted SCARDSETATTRIB message data, which is improperly demarshalled and triggers a buffer over-read...

CVE-2010-0407

Multiple buffer overflows in the MSGFunctionDemarshall function in winscardsvc.c in the PC/SC Smart Card daemon aka PCSCD in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via crafted message data, which is improperly demarshalled...

DEBIAN-CVE-2010-0407

Multiple buffer overflows in the MSGFunctionDemarshall function in winscardsvc.c in the PC/SC Smart Card daemon aka PCSCD in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via crafted message data, which is improperly demarshalled...

CVE-2009-4902

Buffer overflow in the MSGFunctionDemarshall function in winscardsvc.c in the PC/SC Smart Card daemon aka PCSCD in MUSCLE PCSC-Lite 1.5.4 and earlier might allow local users to gain privileges via crafted SCARDCONTROL message data, which is improperly demarshalled. NOTE: this vulnerability exists...

Buffer overflow

Buffer overflow in the MSGFunctionDemarshall function in winscardsvc.c in the PC/SC Smart Card daemon aka PCSCD in MUSCLE PCSC-Lite 1.5.4 and earlier might allow local users to gain privileges via crafted SCARDCONTROL message data, which is improperly demarshalled. NOTE: this vulnerability exists...

Buffer overflow

The MSGFunctionDemarshall function in winscardsvc.c in the PC/SC Smart Card daemon aka PCSCD in MUSCLE PCSC-Lite before 1.5.4 might allow local users to cause a denial of service daemon crash via crafted SCARDSETATTRIB message data, which is improperly demarshalled and triggers a buffer over-read...