6767 matches found
CVE-2002-0439
Cross-site scripting vulnerability in CaupoShop 1.30a and earlier, and possibly CaupoShopPro, allows remote attackers to execute arbitrary Javascript and steal credit card numbers or delete items by injecting the script into new customer information fields such as the message field...
Security Advisory: CBOS - Improving Resilience to DoS Attacks
-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: CBOS - Improving Resilience to Denial-of-Service Attacks ========================================================================= Revision 1.0 For Public Release 2002 May 23 16:00 UTC+0000 -...
CVE-1999-1181
Vulnerability in On-Line Customer Registration software for IRIX 6.2 through 6.4 allows local users to gain root privileges...
CVE-1999-1374
perlshop.cgi shopping cart program stores sensitive customer information in directories and files that are under the web root, which allows remote attackers to obtain that information via an HTTP request...
"Code Red" Worm - Customer Impact
...
DC Scripts DCShop Beta 1.0 02 - File Disclosure (1)
DC Scripts DCShop Beta 1.0 02 - File Disclosure 1 source: https://www.securityfocus.com/bid/2889/info DCShop is a GCI-based ecommerce system from DCScripts. Under certain configurations, a beta version of this product can allow a remote user to request and obtain files containing confidential ord...
DC Scripts DCShop Beta 1.0 02 - File Disclosure (2)
source: https://www.securityfocus.com/bid/2889/info DCShop is a GCI-based ecommerce system from DCScripts. Under certain configurations, a beta version of this product can allow a remote user to request and obtain files containing confidential order data, including credit card and other private...
DC Scripts DCShop Beta 1.0 02 - File Disclosure (1)
source: https://www.securityfocus.com/bid/2889/info DCShop is a GCI-based ecommerce system from DCScripts. Under certain configurations, a beta version of this product can allow a remote user to request and obtain files containing confidential order data, including credit card and other private...
BinTec X4000 Access Router DoS Vulnerability
BinTec X4000 locks up after nmap -sS portscan The BinTec X4000 is a mid-sized multi-purpose, multi-protocol router meant to fit the needs of small to medium companies. Unfortunately, it has a bit of a problem. A simple nmap SYN scan nmap -sS will cause the machine to lock up completely. It can...
Re: Passwords in Net.Commerce/WebSphere decryptable, any version
IBM Global Services Managed Security Services Outside Advisory Redistribution 8 MAR 2001 2:11 GMT MSS-OAR-E01-2001:087.1 =========================================================================== The MSS Outside Advisory Redistribution is designed to provide customers of IBM Managed Security...
More Sonata Conferencing software vulnerabilities.
Vulnerability Report 2 For Voyant Technologies Sonata Conferencing product. Larry W. Cashdollar Vapid Labs Date Published: 12/18/2000 Advisory ID: 12182000-02 CVE CAN: None currently assigned. Title: Sonata doroot command vulnerability. Class: Design Error Remotely Exploitable: no Locally...
DST2K0035.txt
============================================================================ Delphis Consulting Plc ============================================================================ Security Team Advisories 22/09/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...
Intel Express Switch 500 series DoS
Intel Express Switch 500 series DoS Advisory Code: VIGILANTE-2000007 Release Date: August 28, 2000 Systems Affected: Intel Express Switch 550F - Firmware version 2.63 - Firmware version 2.64 Based on the response from Intel quoted below, it is very likely that other switches from the same series...
VIGILANTE-2000007
Intel Express Switch 500 series DoS Advisory Code: VIGILANTE-2000007 Release Date: August 28, 2000 Systems Affected: Intel Express Switch 550F - Firmware version 2.63 - Firmware version 2.64 Based on the response from Intel quoted below, it is very likely that other switches from the same series...
ACC/Ericsson Tigris Accounting Failure
The Tigris is a high-density router/remote-access platform, currently a product of Ericsson, more information on it can be found at: http://www.ericsson.com/datacom/products/wanaccess/tigris/index.shtml There appears to be a bug in the Tigris operating system software that causes Radius accountin...
unixware7.fundamental.txt
OVERVIEW A flaw in SCO UnixWare's security model will allow any user to gain root, read system files, etc. RANT I'm sure many of you are wondering what the response from the people from SCO has been regarding all of these UnixWare problems. Nil. First, a little background. Back when I began my...
ATT_DoS.txt
Subject: DoS attack on AT&T Wireless text-messaging service To: [email protected] Recently, I've had the misfortune of having an automated process at work that reports errors to my PCS phone via email, [email protected] go haywire, and send me a hundred or so messages a day. Even...
shopping.cart.cc.data.txt
Date: Mon, 19 Apr 1999 20:05:18 -0700 From: Joe To: [email protected] Subject: Shopping Carts exposing CC data Tomorrow April 20 1999 CNet's news.com should be running a story regarding various commercial and freeware shopping carts that, when installed incorrectly or when installed by amateur...
