POS Machine Vendor Warns of Possible Payment Card Breach at Restaurants

Due to the better track inventory and accuracy of records, Point-of-sale POS systems are being used in most of the industries including restaurants, lodging, entertainment, and museums around the world. It can be easily set-up depending on the nature of the business. Despite that, Point-of-sale P...

Microsoft Internet Explorer 6.0 ADODB.Stream Object File Installation Weakness

No description provided by source. source: http://www.securityfocus.com/bid/10514/info Microsoft Internet Explorer is prone to a security weakness that may permit malicious HTML documents to create or overwrite files on a victim file system when interpreted from the Local Zone or other Security...

Gnome Evolution 2.x GnuPG Arbitrary Content Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22760/info Evolution is prone to a vulnerability that may allow an attacker to add arbitrary content into a message without the end user knowing. An attacker may be able to exploit this issue to add arbitrary content into...

Microsoft Internet Explorer 5.0.1 LoadPicture File Enumeration Weakness

No description provided by source. source: http://www.securityfocus.com/bid/9611/info Microsoft Internet Explorer is prone to an issue that may permit a remote site to enumerate the existence of files on the client system. This may be exploited via abuse of the VBScript LoadPicture method...

Nucleus CMS 3.0.1 'myid' Parameter SQL Injection Weakness

No description provided by source. source: http://www.securityfocus.com/bid/27127/info Nucleus CMS is prone to an SQL-injection weakness because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Attackers can exploit this issue in conjunction with other...

Pablo Software Solutions FTP Service 1.2 Plaintext Password Weakness

No description provided by source. source: http://www.securityfocus.com/bid/7801/info It has been reported that Pablo FTP Service stores FTP User account passwords in plaintext format. As a result, these credentials could be exposed to other users. It should be noted that while this weakness has...

RunCMS <= 1.6 - Local File Inclusion Vulnerability

No description provided by source. WwW.BugReport.ir AmnPardaz Security Research & Penetration Testing Group Title: RunCms Multiple Vulnerabilities Vendor: http://www.runcms.org/ Bugs: Local File Inclusion, Modules Authorization Weakness Vulnerable Version: RunCMS 1.6 Halloween, 1.5.x prior versio...

PHP 5.2.6 'create_function()' Code Injection Weakness (2)

No description provided by source. source: http://www.securityfocus.com/bid/31398/info PHP is prone to a code-injection weakness because it fails to sufficiently sanitize input to 'createfunction'. Note that the anonymous function returned need not be called for the supplied code to be executed. ...

IKE Aggressive Mode Shared Secret Hash Leakage Weakness

No description provided by source. source: http://www.securityfocus.com/bid/7423/info When a VPN is configured to use a pre-shared master secret and a client attempts to negotiate keys in aggressive mode, a hash of the secret is transmitted across the network in clear-text. This may result in the...

Microsoft Internet Explorer 6.0 Shell.Application Object Script Execution Weakness

No description provided by source. source: http://www.securityfocus.com/bid/10652/info Microsoft Internet Explorer is reported prone to a security weakness that may permit malicious HTML documents the ability to execute script code. This script code has the ability to alter registry settings that...

Cerberus FTP Server 2.1 Information Disclosure Weakness

No description provided by source. source: http://www.securityfocus.com/bid/7369/info It has been reported that Cerberus FTP Server is prone to an information disclosure weakness. The problem exists in the way the FTP server handles the authentication procedure. An attacker may exploit a weakness...

Microsoft Internet Explorer 4/5/6 Embedded Image URI Obfuscation Weakness

No description provided by source. source: http://www.securityfocus.com/bid/10308/info It has been reported that Microsoft Internet Explorer is prone to a URI obfuscation weakness that may hide the true contents of a URI link. The issue occurs when an image is contained within a properly formatte...

Google Desktop Cross-Site Scripting Weakness

No description provided by source. source: http://www.securityfocus.com/bid/22650/info Google Desktop is prone to a cross-site scripting weakness because the application fails to properly sanitize user-supplied input. Successful attacks must exploit this weakness in conjunction with a latent...

Wimpy MP3 Player 5 Text File Overwrite Weakness

No description provided by source. source: http://www.securityfocus.com/bid/16696/info Wimpy MP3 is prone to a weakness that permits the overwriting of a text file with arbitrary attacker-supplied data. Successful exploitation of this issue may aid an attacker in further attacks. The following...

File Thingie 2.5.5 - File Security Bypass

No description provided by source. Title: File Thingie v2.5.5 File Security Bypass Author: Jeremiah Talamantes RedTeam Security Website: http://www.redteamsecure.com/labs Date: 5/15/2010 Application: File Thingie Version: 2.5.5 Link: http://www.solitude.dk/filethingie/download Description: There...

Microsoft Internet Explorer 6.0 TABLE Status Bar URI Obfuscation Weakness

No description provided by source. source: http://www.securityfocus.com/bid/11561/info Microsoft Internet Explorer is reported prone to a URI obfuscation weakness. This issue may be leveraged by an attacker to display false information in the status bar of an unsuspecting user, allowing an attack...

Qualcomm Eudora 6.x Embedded Hyperlink URI Obfuscation Weakness

No description provided by source. source: http://www.securityfocus.com/bid/10305/info It has been reported that the Qualcomm Eudora MTA is prone to a URI obfuscation weakness that may hide the true contents of a link. The problem occurs when a user@location URI is formatted in such a way that a ...

Opera Web Browser 7.5 Resource Detection Weakness

No description provided by source. source: http://www.securityfocus.com/bid/10961/info Opera Web Browser is prone to a security weakness that may permit an attacker to determine the existence of resources on a vulnerable computer. An attacker can use an IFRAME that is accessible within the same...

PHP <= 5.1.6 Mb_Parse_Str Function Register_Globals Activation Weakness

No description provided by source. source: http://www.securityfocus.com/bid/23016/info PHP is prone to a weakness that allows attackers to enable the 'registerglobals' directive because the application fails to handle a memory-limit exception. Enabling the PHP 'registerglobals' directive may allo...

GnuPG 1.x Signed Message Arbitrary Content Injection Weakness

No description provided by source. source: http://www.securityfocus.com/bid/22757/info GnuPG is prone to a weakness that may allow an attacker to add arbitrary content into a message without the end user knowing. An attacker may be able to exploit this issue in applications using GnuPG to add...