CVE-2002-0439

CVE-2002-0439 affects CaupoShop 1.30a and earlier (and possibly CaupoShopPro). The vulnerability is a cross-site scripting flaw that allows remote attackers to inject Javascript via new customer information fields (e.g., the message field), enabling actions like stealing credit card numbers or de...

CVE-2001-0564

The CVE concerns the APC Web/SNMP Management Card (firmware before 310). The vulnerability arises because the device allows only a single telnet connection, enabling a remote attacker to cause a denial of service by repeatedly failing logon attempts, temporarily locking the card. A fix is availab...

CVE-1999-1336

The CVE-1999-1336 entry concerns a vulnerability in 3Com HiPer Access Router Card (HiperARC) versions 4.0–4.2.29 that allows a remote attacker to cause a denial of service (reboot) by flooding the telnet port with IAC packets. The cited sources confirm the affected device family and the attack ve...

CVE-2001-0564

APC Web/SNMP Management Card prior to Firmware 310 only supports one telnet connection, which allows a remote attacker to create a denial of service via repeated failed logon attempts which temporarily locks the card...

VERISIGN "PAYFLOW LINK" PAYMENT SERVICE SECURITY FAILURE

VERISIGN PAYFLOW PAYMENT SERVICE SECURITY FAILURE PAYFLOW LINK SERVICE DESCRIPTION: The final checkout page of various online shopping cart applications presents the shopper with a form asking for credit card acct, exp date, etc. When the shopper submits the form, the data is sent directly to the...

Некорректная работа с Verisign в торговых программых (credentials spoofing)

Не проверяется достоверность подтверждения кредитной карточки, что дает возможность воспользоваться несуществующей кредитной карточкой...

CVE-1999-1061

HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be configured without a password, which allows remote attackers to connect to the printer and change its IP address or disable logging...

CVE-2001-0564

APC Web/SNMP Management Card prior to Firmware 310 only supports one telnet connection, which allows a remote attacker to create a denial of service via repeated failed logon attempts which temporarily locks the card...

DC Scripts DCShop Beta 1.0 02 - File Disclosure (2)

source: https://www.securityfocus.com/bid/2889/info DCShop is a GCI-based ecommerce system from DCScripts. Under certain configurations, a beta version of this product can allow a remote user to request and obtain files containing confidential order data, including credit card and other private...

CVE-2001-0081

Technical details about CVE-2001-0081 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.

CVE-2001-0081

swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could allow attackers to gain access to application keys...

CVE-2000-0874

Eudora mail client includes the absolute path of the sender's host within a virtual card VCF...

CVE-2000-0874

The CVE-2000-0874 entry describes a vulnerability in the Eudora mail client where the absolute path of the sender’s host is disclosed within a virtual card (VCF). Affected component is the VCF handling/serialization in Eudora; root cause is path disclosure leading to potential exposure of local s...

Revival of the SUQ.DIQ homepage

Lots of people have requested the SUQ.DIQ package since the closing of the SUQ.DIQ website. Did you all notice how IBMs stocks dropped after the release of this "exploit" and the rather aggresive advisory released by IBM seemed only to make it worse? I can imagine it's a bit of a set back for IBM...

CVE-2001-0081

swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could allow attackers to gain access to application keys...

CVE-2000-1173

Microsys CyberPatrol uses weak encryption trivial encoding for credit card numbers and uses no encryption for the remainder of the information during registration, which could allow attackers to sniff network traffic and obtain this sensitive information...

CVE-2000-1173

Microsys CyberPatrol uses weak encryption trivial encoding for credit card numbers and uses no encryption for the remainder of the information during registration, which could allow attackers to sniff network traffic and obtain this sensitive information...

CVE-2000-1173

CVE-2000-1173 affects Microsys CyberPatrol. The vulnerability stems from weak encryption (trivial encoding) for credit card numbers and no encryption for other registration data, enabling network sniffing to obtain sensitive information. Public details in the provided documents indicate partial c...

CVE-2000-1064

Buffer overflow in the LPD service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service...

CVE-2000-1065

CVE-2000-1065 concerns the IP implementation of HP JetDirect printer card firmware (versions up to x.08.20 and earlier). The vulnerability allows remote attackers to cause a denial of service (printer crash) by sending a malformed packet. The connected documents confirm affected product (HP JetDi...