Unintentionally logging credit card transactions

Solar Designer of the Openwall Project reported a security vulnerability in the contributed authorizenet module which is part of the ecommerce package. Credit card information was being stored in a system log file. The system should not be saving this information. Versions affected Please check t...

rmtSvc Trojan trial notes-vulnerability warning-the black bar safety net

Warning: please do not use this article weight relates to any method for authentication. line violations Next, I will list some of the so-called social engineering users are often use means: First of all, proficient social engineering users are adept at information gathering, many on the surface ...

Acer TravelMate notebooks smart cards protection bypass

It's possible to bypass screen locking with help system...

CVE-2004-2359

The CVE-2004-2359 entry affects Dell TrueMobile 1300 WLAN Mini-PCI Card Util TrayApplet 3.10.39.0. The flaw is that the TrayApplet does not properly drop SYSTEM privileges when started from the systray applet, allowing local users to escalate privileges by using the Help functionality. Root cause...

CVE-2004-2359

Dell TrueMobile 1300 WLAN Mini-PCI Card Util TrayApplet 3.10.39.0 does not properly drop SYSTEM privileges when started from the systray applet, which allows local users to gain privileges by accessing the Help functionality...

CVE-2004-2359: Undefined Security Weakness

Dell TrueMobile 1300 WLAN Mini-PCI Card Util TrayApplet 3.10.39.0 does not properly drop SYSTEM privileges when started from the systray applet, which allows local users to gain privileges by accessing the Help functionality...

CVE-2005-1982

Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows Server 2003 could allow a local user to obtain information and spoof a server via a man-in-the-middle MITM attack between a client and a domain controller when PKINIT smart card authentication is bein...

CVE-2005-1982

CVE-2005-1982 is a PKINIT vulnerability in Kerberos used by smart card logon on Windows 2000/XP/Server 2003. The flaw allows information disclosure and spoofing by injecting into an authentication session between a client and a domain controller, potentially enabling a malicious server to imperso...

CVE-2005-1982

Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows Server 2003 could allow a local user to obtain information and spoof a server via a man-in-the-middle MITM attack between a client and a domain controller when PKINIT smart card authentication is bein...

Multiple Microsoft Windows Kerberos service vulnerabilities

DoS on protocol parsing. Ability so spoof server on smart card authentication...

[Full-disclosure] User privilege escalation exploit.

Vendor: CyberSource Version: Business Center, Essentials/Small Business, https://businesscenter.cybersource.com/ Severity: Vulnerability allows malicious employees or comprimised accounts to steal money. Vendor Status: Notified, expects to fix issue some time in 2006. Overview: Business Center is...

CVE-2005-2196

The CVE-2005-2196 entry concerns the Apple AirPort card using a default WEP key when not connected to a known/trusted network, which can cause it to automatically connect to a malicious network. The connected documents reference the broader issue in related Airport/Mac OS X contexts (e.g., Nessus...

CVE-2005-2196

The Apple AirPort card uses a default WEP key when not connected to a known or trusted network, which can cause it to automatically connect to a malicious network...

CVE-2005-2196

The Apple AirPort card uses a default WEP key when not connected to a known or trusted network, which can cause it to automatically connect to a malicious network...

CVE-2005-2196: Undefined Security Weakness

The Apple AirPort card uses a default WEP key when not connected to a known or trusted network, which can cause it to automatically connect to a malicious network...

CVE-2005-2294

Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved by an Oracle form, stores a copy of the database tables in a world-readable temporary file, which allows local users to gain sensitive information such as credit card numbers...

CVE-2005-2294

Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved by an Oracle form, stores a copy of the database tables in a world-readable temporary file, which allows local users to gain sensitive information such as credit card numbers...

CVE-2005-0229

CitrusDB 0.3.5 and earlier stores the newfile.txt temporary data file under the web root, which allows remote attackers to steal credit card information via a direct request to newfile.txt...

Ecommerce-Carts SQL injection vulnerability ( IHSTeam )

IHS Iran Hackers Sabotage Public advisory by : c0d3r "Kaveh Razavi" [email protected] ---------------------------------------------------------- advisory url : http://www.ihssecurity.com/cms/modules/mydownloads/visit.php?lid=8 application : Ecommerce-Carts EcommProV.3 and prior vender :...

HP-UX PHSS_26919 : HP-UX, HP Jetdirect, HP Procurve Switches, HP OpenView Network Node Manager (NNM), OpenView Distributed Management (DM), HP TopTools Remote Control Card Running SNMP, Remote Unauthorized Access, Denial of Service (DoS) (HPSBUX00184 SSRT071347 rev.17)

s700800 11.00 OV NNM6.1 pmd/ovtrapd fixes : Vulnerabilities in SNMP request and trap handling. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS26919. The text itself is copyright C Hewlett-Packard Developme...