Lucene search
+L

1639 matches found

Krebs on Security
Krebs on Security
added 2020/07/29 7:46 p.m.42 views

Here’s Why Credit Card Fraud is Still a Thing

Most of the civilized world years ago shifted to requiring computer chips in payment cards that make it far more expensive and difficult for thieves to clone and use them for fraud. One notable exception is the United States, which is still lurching toward this goal. Heres a look at the havoc tha...

6.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/07/24 12:00 a.m.43 views

Juniper Junos MX Series PFE Small Packet DoS (JSA11036)

According to its self-reported version, the remote Juniper Junos OS device is affected by a denial of service DoS vulnerability. When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configured for inline IP reassembly, used by L2TP, MAP-E...

7.5CVSS7.4AI score0.01075EPSS
SaveExploits0References2
Prion
Prion
added 2020/07/17 7:15 p.m.24 views

Design/Logic Flaw

On Juniper Networks Junos MX Series with service card configured, receipt of a stream of specific packets may crash the MS-PIC component on MS-MIC or MS-MPC. By continuously sending these specific packets, an attacker can repeatedly bring down MS-PIC on MS-MIC/MS-MPC causing a prolonged Denial of...

5CVSS7.6AI score0.01044EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/15 12:00 a.m.11 views

The vulnerability of the VM-Series network interface cards is related to insufficient protection of registration data, which allows attackers to disclose sensitive information and cause service failures.

The vulnerability of the VM-Series network firewalls is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to disclose protected information and cause service failures...

6.3CVSS5.7AI score0.00307EPSS
SaveExploits0References3Affected Software1
ThreatPost
ThreatPost
added 2020/07/07 8:05 p.m.133 views

Keeper Threat Group Rakes in $7M from Hundreds of Compromised E-Commerce Sites

Since its launch three years ago, the Keeper threat group has compromised more than 570 e-commerce websites, from online liquor stores to Apple product resellers. And experts warn of future, increasingly sophisticated attacks against online merchants worldwide. The Keeper group, a faction of the...

8.2AI score0.05272EPSS
SaveExploits1References14
Krebs on Security
Krebs on Security
added 2020/06/27 5:27 p.m.27 views

Russian Cybercrime Boss Burkov Gets 9 Years

A well-connected Russian hacker once described as “an asset of supreme importance” to Moscow was sentenced on Friday to nine years in a U.S. prison after pleading guilty to running a site that sold stolen payment card data, and to administering a highly secretive crime forum that counted among it...

6.8AI score
SaveExploits0
Schneier on Security
Schneier on Security
added 2020/06/17 11:21 a.m.31 views

Bank Card "Master Key" Stolen

South Africa's Postbank experienced a catastrophic security failure. The bank's master PIN key was stolen, forcing it to cancel and replace 12 million bank cards. The breach resulted from the printing of the bank's encrypted master key in plain, unencrypted digital language at the Postbank's old...

0.6AI score
SaveExploits0
OSV
OSV
added 2020/06/17 8:35 a.m.10 views

SUSE-SU-2020:1633-1 Security update for xen

This update for xen fixes the following issues: - CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called it. This attack is known as Special Register Buffer Data Sampling SRBDS or 'CrossTalk...

5.5CVSS6.6AI score0.0054EPSS
SaveExploits0References5
Hacker One
Hacker One
added 2020/06/04 11:40 a.m.24 views

QIWI: PIN OK attack

PIN OK attack is an attack when a wedge-device created for MiTM is used to substitute the response from the card during an offline-PIN check and say that PIN was correct. Reproduction steps: An attacker with a stolen card without the correct PIN knowledge can use either a so-called wedge device f...

0.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/06/02 12:00 a.m.10 views

The vulnerability of Microprogrammed Network Interface Cards from Cisco Firepower Threat Defense, related to resource management errors, allows attackers to trigger a service failure.

The vulnerability of Cisco Firepower Threat Defense’s microprogrammed network interface controllers is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failures by creating a large number of remote management connections on the...

5.3CVSS6AI score0.01675EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2020/05/08 1:15 a.m.19 views

CVE-2012-0952

A heap buffer overflow was discovered in the device control ioctl in the Linux driver for Nvidia graphics cards, which may allow an attacker to overflow 49 bytes. This issue was fixed in version 295.53...

5CVSS5.3AI score0.00306EPSS
SaveExploits1References1
OSV
OSV
added 2020/05/08 1:15 a.m.13 views

CVE-2012-0952

A heap buffer overflow was discovered in the device control ioctl in the Linux driver for Nvidia graphics cards, which may allow an attacker to overflow 49 bytes. This issue was fixed in version 295.53...

5CVSS7.3AI score
SaveExploits0References2
HackRead
HackRead
added 2020/04/25 9:27 p.m.42 views

Dark web hackers selling 400,000 South Korean & US payment card data

By Sudais Asif According to researchers, this is the biggest sale of South Korean payment cards both credit and debit on the dark web in 2020. This is a post from HackRead.com Read the original post: Dark web hackers selling 400,000 South Korean & US payment card data...

2AI score
SaveExploits0
Kitploit
Kitploit
added 2020/04/20 9:30 p.m.238 views

Adamantium-Thief - Decrypt Chromium Based Browsers Passwords, Cookies, Credit Cards, History, Bookmarks

Get chromium browsers: passwords, credit cards, history, cookies, bookmarks. Chrome 80 is supported! Examples: Getpasswords from browsers: Stealer.exe PASSWORDS Get credit cards from browsers: Stealer.exe CREDITCARDS Get history from browsers: Stealer.exe HISTORY Get bookmarks from browsers:...

7.3AI score
SaveExploits0References1
Snyk
Snyk
added 2020/04/17 12:00 a.m.6 views

Malicious Package

Overview ruby-playingcards is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...

8CVSS6.9AI score
SaveExploits0References2
Snyk
Snyk
added 2020/04/17 12:00 a.m.2 views

Malicious Package

Overview playing-cards is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using playing-cards...

8CVSS5.5AI score
SaveExploits0References2
Veracode
Veracode
added 2020/04/10 12:55 a.m.41 views

Denial Of Service (DoS)

The kernel package is vulnerable to denial of service DpS. Due to a flaw in the dvbcaioctl function in the Linux kernel's av7110 module. On systems that use old DVB cards that require the av7110 module, a local, unprivileged user could use this flaw to cause a denial of service or escalate their...

7.2CVSS2.9AI score0.00404EPSS
SaveExploits1References15Affected Software2
Veracode
Veracode
added 2020/04/10 12:49 a.m.23 views

Buffer Overflows

PC/SC Lite is vulnerable to buffer overflow in the way the pcscd daemon. It is due to a resource manager that coordinates communications with smart card readers and smart cards connected to the system, handled client requests. A local user could create a specially-crafted request that would cause...

6.8CVSS4.5AI score0.00394EPSS
SaveExploits0References16Affected Software1
Veracode
Veracode
added 2020/04/10 12:49 a.m.24 views

Denial Of Service (DoS)

PC/SC Lite is vulnerable to Denial Of Service DoS.It is possible due to the way the pcscd daemon coordinates communications with smart card readers and smart cards connected to the system, handled client requests. A local user could create a specially-crafted request that would cause the pcscd...

2.1CVSS4.6AI score0.0037EPSS
SaveExploits0References13Affected Software1
Microsoft KB
Microsoft KB
added 2020/04/10 12:00 a.m.12 views

"0x00000050" Stop error after you install update 2670838 on a computer that is running Windows 7 SP1 or Windows Server 2008 R2 SP1

"0x00000050" Stop error after you install update 2670838 on a computer that is running Windows 7 SP1 or Windows Server 2008 R2 SP1 Introduction This update fixes the following issue in Windows 7 Service Pack 1 SP1 and Windows Server 2008 R2 SP1: Assume that you install update 2670838 on a compute...

5.6AI score
SaveExploits0
Rows per page
Query Builder