CVE-2009-2306

The CVE-2009-2306 issue affects the ARD-9808 DVR card security camera. The vulnerability arises from storing sensitive information under the web root with insufficient access control, enabling remote attackers to download a file (dvr.ini) containing usernames and passwords via a direct request. N...

CVE-2009-2306

The ARD-9808 DVR card security camera stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing usernames and passwords via a direct request for dvr.ini...

ARD-9808 DVR Card Security Camera (GET Request) Remote DoS Exploit

No description provided by source. import socket import sys print "----------------------------------------------------------------" print " ARD-9808 DVR Card Security Camera = Remote Denial Of Service " print " author: Stack " print...

CVE-2009-2305: Improper Input Validation

The ARD-9808 DVR card security camera allows remote attackers to cause a denial of service via a long URI composed of //.\ slash slash dot backslash sequences...

CVE-2009-2306: Undefined Security Weakness

The ARD-9808 DVR card security camera stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing usernames and passwords via a direct request for dvr.ini...

ARD-9808 DVR Card Security Camera Arbitrary Config Disclosure Vuln

Exploit for hardware platform in category remote exploits ================================================================== ARD-9808 DVR Card Security Camera Arbitrary Config Disclosure Vuln ==================================================================...

ARD-9808 DVR Card Security Camera (GET Request) Remote DoS Exploit

Exploit for hardware platform in category dos / poc ================================================================== ARD-9808 DVR Card Security Camera GET Request Remote DoS Exploit ================================================================== import socket import sys print...

ARD-9808 DVR Card Security Camera - Arbitrary Configuration Disclosure

ARD-9808 DVR Card Security Camera - Arbitrary Configuration Disclosure ------------------------------------------------- SoftWare Name : ARD-9808 DVR Card Security Camera Passwords View Bug ------------------------------------------------- Author : Septemb0x Web Site : www.ozkanbozkurt.com Procut...

ARD-9808 DVR Card Security Camera - GET Remote Denial of Service

ARD-9808 DVR Card Security Camera - GET Remote Denial of Service import socket import sys print "----------------------------------------------------------------" print " ARD-9808 DVR Card Security Camera = Remote Denial Of Service " print " author: Stack " print...

TJX Hack Accomplice Now Broke, Awaiting Sentence

From Wired.com Kim Zetter Accused TJX hacker kingpin Albert Gonzalez called his credit card theft ring “Operation Get Rich or Die Tryin.” He spent $75,000 on a birthday party for himself and once complained that he had to manually count $340,000 in pilfered $20 bills because his counting machine...

Cormac Herley on the Underground Economy, IRC Economics and the Externalities of Cybercrime

Dennis Fisher talks with Cormac Herley of Microsoft Research about the paper he co-authored on the realities of the underground economy, why sales of stolen credit cards resemble a market for lemons and how we can get better data on cybercrime activities. Podcast audio courtesy of sykboy65 Downlo...

Fedora 11 : mingw32-opensc-0.11.8-1.fc11 (2009-4967)

CVE-2009-1603 A minor update fixing security problem within pkcs11-tool command. http://www.opensc-project.org/pipermail/opensc- announce/2009-May/000025.html OpenSC is a package for for accessing smart card devices. Basic functionality e.g. SELECT FILE, READ BINARY should work on any ISO 7816-4...

[SECURITY] Fedora 11 Update: mingw32-opensc-0.11.8-1.fc11

OpenSC is a package for for accessing smart card devices. Basic functionality e.g. SELECT FILE, READ BINARY should work on any ISO 7816-4 compatible smart card. Encryption and decryption using private keys on the smart card is possible with PKCS 15 compatible cards, such as the FINEID Finnish...

[SECURITY] Fedora 10 Update: mingw32-opensc-0.11.8-1.fc10

OpenSC is a package for for accessing smart card devices. Basic functionality e.g. SELECT FILE, READ BINARY should work on any ISO 7816-4 compatible smart card. Encryption and decryption using private keys on the smart card is possible with PKCS 15 compatible cards, such as the FINEID Finnish...

[SECURITY] Fedora 9 Update: opensc-0.11.8-1.fc9

OpenSC is a package for for accessing smart card devices. Basic functionality e.g. SELECT FILE, READ BINARY should work on any ISO 7816-4 compatible smart card. Encryption and decryption using private keys on the smart card is possible with PKCS 15 compatible cards, such as the FINEID Finnish...

[SECURITY] Fedora 10 Update: opensc-0.11.8-1.fc10

OpenSC is a package for for accessing smart card devices. Basic functionality e.g. SELECT FILE, READ BINARY should work on any ISO 7816-4 compatible smart card. Encryption and decryption using private keys on the smart card is possible with PKCS 15 compatible cards, such as the FINEID Finnish...

[SECURITY] Fedora 11 Update: opensc-0.11.8-1.fc11

OpenSC is a package for for accessing smart card devices. Basic functionality e.g. SELECT FILE, READ BINARY should work on any ISO 7816-4 compatible smart card. Encryption and decryption using private keys on the smart card is possible with PKCS 15 compatible cards, such as the FINEID Finnish...

Data-sniffing attack costs Heartland $12.6m

From The Register Dan Goodin Electronic payments processor Heartland Payment Systems said Thursday it has allocated $12.6m to cover a security breach that exposed sensitive card holder data crossing its network. More than half that amount involves a fine MasterCard has assessed banks that did...

Botnet hijack: Researchers dissect Torpig malware operation

Security researchers at University of California, Santa Barbara have broken into the nerve center of the Torpig botnet also called Sinowal or Mebroot to find a ten-day stash of 10,000 bank accounts and credit card numbers worth hundreds of thousands of dollars. During the botnet hijack .pdf, the...

CentOS 4 : kernel (CESA-2007:0014)

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...