Multiple Microsoft Windows Kerberos service vulnerabilities

DoS on protocol parsing. Ability so spoof server on smart card authentication...

[Full-disclosure] User privilege escalation exploit.

Vendor: CyberSource Version: Business Center, Essentials/Small Business, https://businesscenter.cybersource.com/ Severity: Vulnerability allows malicious employees or comprimised accounts to steal money. Vendor Status: Notified, expects to fix issue some time in 2006. Overview: Business Center is...

CVE-2005-2196

The CVE-2005-2196 entry concerns the Apple AirPort card using a default WEP key when not connected to a known/trusted network, which can cause it to automatically connect to a malicious network. The connected documents reference the broader issue in related Airport/Mac OS X contexts (e.g., Nessus...

CVE-2005-2196

The Apple AirPort card uses a default WEP key when not connected to a known or trusted network, which can cause it to automatically connect to a malicious network...

CVE-2005-2196

The Apple AirPort card uses a default WEP key when not connected to a known or trusted network, which can cause it to automatically connect to a malicious network...

CVE-2005-2294

Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved by an Oracle form, stores a copy of the database tables in a world-readable temporary file, which allows local users to gain sensitive information such as credit card numbers...

CVE-2005-2294

Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved by an Oracle form, stores a copy of the database tables in a world-readable temporary file, which allows local users to gain sensitive information such as credit card numbers...

CVE-2005-0229

CitrusDB 0.3.5 and earlier stores the newfile.txt temporary data file under the web root, which allows remote attackers to steal credit card information via a direct request to newfile.txt...

Ecommerce-Carts SQL injection vulnerability ( IHSTeam )

IHS Iran Hackers Sabotage Public advisory by : c0d3r "Kaveh Razavi" [email protected] ---------------------------------------------------------- advisory url : http://www.ihssecurity.com/cms/modules/mydownloads/visit.php?lid=8 application : Ecommerce-Carts EcommProV.3 and prior vender :...

HP-UX PHSS_26909 : HP-UX, HP Jetdirect, HP Procurve Switches, HP OpenView Network Node Manager (NNM), OpenView Distributed Management (DM), HP TopTools Remote Control Card Running SNMP, Remote Unauthorized Access, Denial of Service (DoS) (HPSBUX00184 SSRT071347 rev.17)

s700800 11.00 OV ECS3.00 Intermediate patch April 2002 : Vulnerabilities in SNMP request and trap handling. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS26909. The text itself is copyright C...

HP-UX PHSS_26919 : HP-UX, HP Jetdirect, HP Procurve Switches, HP OpenView Network Node Manager (NNM), OpenView Distributed Management (DM), HP TopTools Remote Control Card Running SNMP, Remote Unauthorized Access, Denial of Service (DoS) (HPSBUX00184 SSRT071347 rev.17)

s700800 11.00 OV NNM6.1 pmd/ovtrapd fixes : Vulnerabilities in SNMP request and trap handling. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS26919. The text itself is copyright C Hewlett-Packard Developme...

CVE-2005-0620

Einstein 1.0 stores credit card information in plaintext in the world-readable wallets.dat file, which allows local users to steal the information...

CVE-2005-0620

Einstein 1.0 stores credit card information in plaintext in the world-readable wallets.dat file, which allows local users to steal the information...

CVE-2005-0620

The CVE-2005-0620 entry concerns Einstein 1.0, where credit card information is stored in plaintext within the world-readable wallets.dat. This plaintext storage enables local users to access sensitive data. The description confirms the affected component (wallets.dat containing credentials) and ...

CVE-2005-0409

CitrusDB 0.3.6 and earlier does not verify authorization for the 1 importcc.php and 2 uploadcc.php, which allows remote attackers to upload credit card data and obtain sensitive information such as the pathnames for temporary files that store credit card data, and facilitates the exploitation of...

CVE-2005-0409

CVE-2005-0409 affects CitrusDB 0.3.6 and earlier. The vulnerability arises because importcc.php and uploadcc.php do not perform proper authorization checks, allowing remote attackers to upload credit card data and learn the pathnames of temporary files storing that data, which can facilitate acce...

[Full-Disclosure] Advisory: Upload Authorization bypass in CitrusDB

Advisory: Upload Authorization bypass in CitrusDB A group of students at our lab called RedTeam found an authorization bypass vulnerability in CitrusDB which results in upload of fake credit card data, SQL-Injection and disclosure of credit card data. Details ======= Product: CitrusDB Affected...

CVE-2005-0229

CitrusDB 0.3.5 and earlier stores the newfile.txt temporary data file under the web root, which allows remote attackers to steal credit card information via a direct request to newfile.txt...

CVE-2005-0229

CVE-2005-0229 affects CitrusDB up to version 0.3.5, where a temporary file newfile.txt is stored under the web root and can be accessed via HTTP (e.g., /io/newfile.txt), enabling remote attackers to exfiltrate credit card data. The vulnerability arises from storing sensitive data in a web-accessi...

CVE-2005-0409

CitrusDB 0.3.6 and earlier does not verify authorization for the 1 importcc.php and 2 uploadcc.php, which allows remote attackers to upload credit card data and obtain sensitive information such as the pathnames for temporary files that store credit card data, and facilitates the exploitation of...