Proposed U.S. Wassenaar Rules on Intrusion Software

Two things worth noting from yesterday’s unveiling of the Bureau of Industry and Security’s proposed Wassenaar rules for the U.S. that weren’t so overt: a The U.S. generally leads the way in implementing Wassenaar changes, and this time it’s been beaten by the EU by almost 18 months; and b reques...

CVE-2014-6211

The command-line scripts in IBM WebSphere Commerce 6.0 through 6.0.0.11, 7.0 through 7.0.0.9, and 7.0 Feature Pack 2 through 8, when debugging is configured, do not properly restrict the logging of personal data, which allows local users to obtain sensitive information by reading a log file...

Command injection

The command-line scripts in IBM WebSphere Commerce 6.0 through 6.0.0.11, 7.0 through 7.0.0.9, and 7.0 Feature Pack 2 through 8, when debugging is configured, do not properly restrict the logging of personal data, which allows local users to obtain sensitive information by reading a log file...

CVE-2014-6211

The command-line scripts in IBM WebSphere Commerce 6.0 through 6.0.0.11, 7.0 through 7.0.0.9, and 7.0 Feature Pack 2 through 8, when debugging is configured, do not properly restrict the logging of personal data, which allows local users to obtain sensitive information by reading a log file...

CVE-2014-6211

CVE-2014-6211 affects IBM WebSphere Commerce 6.0–6.0.0.11, 7.0–7.0.0.9, and 7.0 Feature Pack 2–8. When debugging is enabled, logging is not properly restricted for personal data, allowing local users to read sensitive information from log files. Exploitation details are not provided in the suppli...

IBM WebSphere Commerce Local Information Disclosure Vulnerability

IBM WebSphere Commerce is the industry's leading next-generation e-business solution. A local information disclosure vulnerability exists in IBM WebSphere Commerce, which allows a local attacker to exploit the vulnerability to access sensitive information because the program fails to properly...

WordPress e-Commerce Plugin <= 3.8.9 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress e-Commerce Plugin <= 3.9.2 - Reflected XSS

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress e-Commerce Plugin <= 3.8.14.3 - Authorisation Bypass

This plugin is prone to an authorisation bypass vulnerability. Solution Upgrade the plugin...

WordPress e-Commerce Plugin 3.8.9.5 - File Upload

This plugin is prone to a GIF file upload vulnerability. Solution Upgrade the plugin...

WordPress E-Commerce Predictive Search Plugin - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress e-Commerce Plugin <= 3.8.9 - SQL Injection

Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands. Solution Update the plugin...

WordPress E-Commerce Predictive Search Plugin - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress e-Commerce Plugin <= 3.8.9.5 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress e-Commerce Plugin 3.8.9.5 - File Upload

This plugin is prone to a GIF file upload vulnerability. Solution Upgrade the plugin...

IBM WebSphere Commerce Debug Logging Local Information Disclosure Vulnerability

IBM WebSphere Commerce is the industry's leading next-generation e-business solution. Some command line scripts of IBM WebSphere Commerce run in debug state, which can record user data to log files and lead to information leakage...

PayPal Inc Bug Bounty #114 - JDWP RCE Vulnerability

Document Title: =============== PayPal Inc Bug Bounty 114 - JDWP RCE Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1474 Video: http://www.vulnerability-lab.com/getcontent.php?id=1474 Release Date: ============= 2015-04-28 Vulnerability...

PayPal Inc Bug Bounty #114 - JDWP RCE Vulnerability

Document Title: =============== PayPal Inc Bug Bounty 114 - JDWP RCE Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1474 Video: http://www.vulnerability-lab.com/getcontent.php?id=1474 Release Date: ============= 2015-04-28 Vulnerability...

The world e-Commerce system Magento exposed a remote code execution vulnerability-vulnerability warning-the black bar safety net

eBay investment e-Commerce system of Magento on a global scale within a total of more than 2 4 0 0 0 0 merchant, is acclaimed the world's best e-Commerce system. However, the consistently low profile of Magento recently, but“with”will affect the world tens of thousands of merchant remote code...

Oracle Commerce Platform A vulnerability exists in the Commerce Platform component

Oracle Commerce Platform is the United States Oracle Oracle company's set of e-business solutions platform. A security vulnerability exists in the Dynamo Application Framework - HTML Admin User Interface subcomponent of the Oracle Commerce Platform component of Oracle Commerce Platform. A remote...