nCipher Advisory #4: Console Java apps can leak passphrases on Windows

nCipherTM Security Advisory No. 4 Console Java applications can leak passphrases on Windows ========================================================= SUMMARY ======= In certain circumstances, JavaTM applications using the standard nCipher ConsoleCallBack class on Windows NT/2000 can be made to le...

Metacart vuln.

Summary MetaCart2.sql is an ASP based shopping Cart application with SQL database. A security vulnerability in the product allows attackers to access the database used for storing user provided data Credit cart numbers, Names, Surnames, Addresses, E-mails, etc. Details Exploit: Accessing any of t...

nCipher Advisory #3: MSCAPI keys erroneously module-protected - update

nCipher Security Advisory No. 3 | Windows 2000 keys unexpectedly only module-protected | ==================================================== | | UPDATED - VERSION 2 | Changes are marked with |' at the right. | | | SUMMARY ======= In certain circumstances, the nCipher MSCAPI CSP Install Wizard...

CVE-2002-0439

CVE-2002-0439 affects CaupoShop 1.30a and earlier (and possibly CaupoShopPro). The vulnerability is a cross-site scripting flaw that allows remote attackers to inject Javascript via new customer information fields (e.g., the message field), enabling actions like stealing credit card numbers or de...

CVE-2002-0439

Cross-site scripting vulnerability in CaupoShop 1.30a and earlier, and possibly CaupoShopPro, allows remote attackers to execute arbitrary Javascript and steal credit card numbers or delete items by injecting the script into new customer information fields such as the message field...

CVE-2001-0564

APC Web/SNMP Management Card prior to Firmware 310 only supports one telnet connection, which allows a remote attacker to create a denial of service via repeated failed logon attempts which temporarily locks the card...

CVE-2001-0564

The CVE concerns the APC Web/SNMP Management Card (firmware before 310). The vulnerability arises because the device allows only a single telnet connection, enabling a remote attacker to cause a denial of service by repeatedly failing logon attempts, temporarily locking the card. A fix is availab...

CVE-1999-1336

The CVE-1999-1336 entry concerns a vulnerability in 3Com HiPer Access Router Card (HiperARC) versions 4.0–4.2.29 that allows a remote attacker to cause a denial of service (reboot) by flooding the telnet port with IAC packets. The cited sources confirm the affected device family and the attack ve...

CVE-2001-0564: Undefined Security Weakness

APC Web/SNMP Management Card prior to Firmware 310 only supports one telnet connection, which allows a remote attacker to create a denial of service via repeated failed logon attempts which temporarily locks the card...

CVE-1999-1336: Undefined Security Weakness

3Com HiPer Access Router Card HiperARC 4.0 through 4.2.29 allows remote attackers to cause a denial of service reboot via a flood of IAC packets to the telnet port...

CVE-2001-0757: Undefined Security Weakness

Cisco 6400 Access Concentrator Node Route Processor 2 NRP2 12.1DC card does not properly disable access when a password has not been set for vtys, which allows remote attackers to obtain access via telnet...

Некорректная работа с Verisign в торговых программых (credentials spoofing)

Не проверяется достоверность подтверждения кредитной карточки, что дает возможность воспользоваться несуществующей кредитной карточкой...

VERISIGN "PAYFLOW LINK" PAYMENT SERVICE SECURITY FAILURE

VERISIGN PAYFLOW PAYMENT SERVICE SECURITY FAILURE PAYFLOW LINK SERVICE DESCRIPTION: The final checkout page of various online shopping cart applications presents the shopper with a form asking for credit card acct, exp date, etc. When the shopper submits the form, the data is sent directly to the...

CVE-1999-1061

HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be configured without a password, which allows remote attackers to connect to the printer and change its IP address or disable logging...

CVE-2001-0564

APC Web/SNMP Management Card prior to Firmware 310 only supports one telnet connection, which allows a remote attacker to create a denial of service via repeated failed logon attempts which temporarily locks the card...

DC Scripts DCShop Beta 1.0 02 - File Disclosure (2)

source: https://www.securityfocus.com/bid/2889/info DCShop is a GCI-based ecommerce system from DCScripts. Under certain configurations, a beta version of this product can allow a remote user to request and obtain files containing confidential order data, including credit card and other private...

CVE-2000-0874

Eudora mail client includes the absolute path of the sender's host within a virtual card VCF...

CVE-2001-0081

Technical details about CVE-2001-0081 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.

CVE-2000-0874

The CVE-2000-0874 entry describes a vulnerability in the Eudora mail client where the absolute path of the sender’s host is disclosed within a virtual card (VCF). Affected component is the VCF handling/serialization in Eudora; root cause is path disclosure leading to potential exposure of local s...

CVE-2001-0081

swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could allow attackers to gain access to application keys...