1624 matches found
CVE-2021-22811
A CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause script execution when the request of a privileged account accessing the vulnerable web page is intercepted. Affected Products: 1-Phase Uninterruptible Power Supply UP...
CVE-2021-22815
A CWE-200: Information Exposure vulnerability exists which could cause the troubleshooting archive to be accessed. Affected Products: 1-Phase Uninterruptible Power Supply UPS using NMC2 including Smart-UPS, Symmetra, and Galaxy 3500 with Network Management Card 2 NMC2: AP9630/AP9630CH/AP9630J,...
CVE-2021-22813
A CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC pointing to an edit policy file. Affected Products:...
Mageia: Security Advisory (MGASA-2019-0220)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the programmatic tools and libraries used for working with OpenSC smart cards involves operations that occur outside of the buffer in memory. This allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the software tools and libraries used for working with OpenSC smart cards is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service...
Infamous dark net carding site UniCC to close
UniCC, the largest site on the dark web that sells credit card and debit card information, will close up shop for good, taking its affiliate site, LuxSocks, with it, too. According to Elliptic, a company that offers risk solutions for cryptoassets, the unknown UniCC administrators have made an...
Dark Web's Largest Marketplace for Stolen Credit Cards is Shutting Down
UniCC, the biggest dark web marketplace for stolen credit and debit cards, has announced that it's shuttering its operations after earning $358 million in purchases since 2013 using cryptocurrencies such as Bitcoin, Litecoin, Ether, and Dash. "Don't build any conspiracy theories about us leaving,...
The vulnerability of the program tools and libraries used for working with OpenSC smart cards lies in reading data beyond the allowed buffer limits, allowing an attacker to access confidential data.
The vulnerability of the software tools and libraries used for working with OpenSC smart cards is related to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data...
Largest dark web market for stolen cards UniCC calls it quits
By Waqas UniCC marketplace has been active on the dark web since 2013 however its team has called its quits… This is a post from HackRead.com Read the original post: Largest dark web market for stolen cards UniCC calls it quits...
The vulnerability in the WebAuthentication browser implementation by Google Chrome, related to the use of memory after it is freed, allows a hacker to compromise the user’s rendering process.
The vulnerability of the WebAuthentication browser implementation by Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the rendering process of a user whose credit card is stored in their Google account...
CVE-2021-37401
An attacker may obtain the user credentials from file servers, backup repositories, or ZLD files saved in SD cards. As a result, the PLC user program may be uploaded, altered, and/or downloaded...
CVE-2021-37401
IDEC PLCs are affected by CVE-2021-37401 (Plaintext storage of a password). The trusted‑credentials leakage occurs when an attacker obtains user credentials from file servers, backup repositories, or ZLD files saved on SD cards, enabling unauthorized PLC program upload/alteration/download. The jo...
CVE-2021-20827
Plaintext storage of a password vulnerability in IDEC PLCs FC6A Series MICROSmart All-in-One CPU module v2.32 and earlier, FC6A Series MICROSmart Plus CPU module v1.91 and earlier, WindLDR v8.19.1 and earlier, WindEDIT Lite v1.3.1 and earlier, and Data File Manager v2.12.1 and earlier allows an...
CVE-2021-20827
Plaintext storage of a password vulnerability in IDEC PLCs FC6A Series MICROSmart All-in-One CPU module v2.32 and earlier, FC6A Series MICROSmart Plus CPU module v1.91 and earlier, WindLDR v8.19.1 and earlier, WindEDIT Lite v1.3.1 and earlier, and Data File Manager v2.12.1 and earlier allows an...
CVE-2021-20827
Plaintext storage of a password vulnerability in IDEC PLCs FC6A Series MICROSmart All-in-One CPU module v2.32 and earlier, FC6A Series MICROSmart Plus CPU module v1.91 and earlier, WindLDR v8.19.1 and earlier, WindEDIT Lite v1.3.1 and earlier, and Data File Manager v2.12.1 and earlier allows an...
The vulnerability of the Yarus C2100 payment terminal software allows a perpetrator to execute arbitrary code with root privileges of the operating system.
The vulnerability of the Yarus C2100 payment terminal software relates to the possibility of a memory overflow in the kernel’s static memory when working with smart cards. Exploiting this vulnerability can allow an attacker to execute arbitrary code with root privileges on the operating system...
Capcom Arcade Stadium’s record player numbers blamed on card mining
Some of my favourite retro video games are making waves on Steam, but not in the way you might think. Classics such as Strider, Ghosts n’ Goblins, and more are all available as content for Capcom Arcade Stadium. This is an emulator which lets you play 31 arcade games from the 80s/90s. The games...
Please don’t buy this! 3 gift card scams to watch out for this holiday season
With the holiday season around the corner, we thought it was a good time to look at the dangers that come with gift cards. Gift cards can be an easy win in cases where you don’t know the receiver well enough to decide on a fitting gift, or when their wishes are out of your price range. But there...
Fedora: Security Advisory for radeontop (FEDORA-2021-632bbbf893)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
