Wordpress iMember360 Plugin 3.8.012 - 3.9.001 - Multiple Vulnerabilities

No description provided by source. ------------ BACKGROUND ------------ iMember360is a WordPress plugin that will turn a normal WordPress site into a full featured membership site. It includes all the protection controls you can imagine, yet driven by Infusionsoft's second-to-none CRM and...

Mac OS X 10.9.x < 10.9.4 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.9.x that is prior to 10.9.4. This update contains several security-related fixes for the following components : - Certificate Trust Policy - copyfile - curl - Dock - Graphics Driver - iBooks Commerce - Intel Graphics Driver - Intel Compute -...

EShoppingPro 1.0 Search_Run.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20089/info EShoppingPro is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. An attacker may be able to exploit this issue to...

PayPal Inc BB #74 - Persistent Core Backend Vulnerability

Document Title: =============== PayPal Inc BB 74 - Persistent Core Backend Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1278 PayPal Inc Security UID: cDc49dT Vulnerability Magazine Article:...

CVE-2014-0943

IBM WebSphere Commerce 6.0 Feature Pack 2 through Feature Pack 5, 7.0.0.0 through 7.0.0.8, and 7.0 Feature Pack 1 through Feature Pack 7 allows remote attackers to cause a denial of service resource consumption and daemon crash via a malformed id parameter in a request...

Cross site request forgery (csrf)

IBM WebSphere Commerce 6.0 Feature Pack 2 through Feature Pack 5, 7.0.0.0 through 7.0.0.8, and 7.0 Feature Pack 1 through Feature Pack 7 allows remote attackers to cause a denial of service resource consumption and daemon crash via a malformed id parameter in a request...

CVE-2014-0943

IBM WebSphere Commerce 6.0 Feature Pack 2–5, 7.0.0.0–7.0.0.8, and 7.0 Feature Pack 1–7 are affected by CVE-2014-0943. The vulnerability allows remote attackers to cause a denial of service (resource consumption and daemon crash) via a malformed id parameter in a request. The description and conne...

CVE-2014-0943

IBM WebSphere Commerce 6.0 Feature Pack 2 through Feature Pack 5, 7.0.0.0 through 7.0.0.8, and 7.0 Feature Pack 1 through Feature Pack 7 allows remote attackers to cause a denial of service resource consumption and daemon crash via a malformed id parameter in a request...

struts2 high-risk vulnerabilities, or may lead the Internet Security disaster-vulnerability warning-the black bar safety net

2 0 1 3 year 7 month 1 7 day is a many security operations, hackers sleepless nights...... Struts2 high-risk vulnerabilities to cause massive information leakage will affect countless Internet users, probably no one will be spared......） To exploit the vulnerability, a hacker can initiate remote...

eBay Hacked, Change your Account Password Now

If you have an eBay Account then you should change your password immediately, because the World's biggest E-commerce company with 128 million active users announced today in a press release that it had been Hacked. eBay revealed that attackers compromised customers' database including emails,...

SA-CONTRIB-2014-056 - Commerce Moneris - Information Disclosure

Commerce Moneris is a payment module that integrates the Moneris payment system with Drupal Commerce. The module stores credit card data in a commerce order object unnecessarily for the purpose of passing the credit card information to the payment gateway. The credit card information is never...

The U.S., China and Glass Houses

That was quite a show the government put on Monday. The dramatic press conference featuring Attorney General Eric Holder, the coordinated press leaks ahead of the announcement, the strong statements about the sanctity of American commerce and how the United States will prosecute those who conduct...

PayPal Filter Bypass

Document Title: =============== Paypal Inc Bug Bounty 109 MOS - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1050 PayPal Security UID: Pq115cey Release Date: ============= 2014-05-14 Vulnerability Laboratory ID VL-ID:...

CVE-2013-5916

Cross-site scripting XSS vulnerability in falha.php in the Bradesco Gateway plugin 2.0 for Wordpress, as used in the WP e-Commerce plugin, allows remote attackers to inject arbitrary web script or HTML via the QUERYSTRING...

FTC Discusses Regulating User-Generated Health Information

The proliferation of wearable devices coupled with smartphone apps that monitor heart rates and other health metrics raises an important question: How exactly should the information generated by these devices be regulated? If there’s a fist fight in a bar can a person’s Fitbit accelerator be...

WordPress iMember360is 3.9.001 XSS / Disclosure / Code Execution

WordPress iMember360is plugin versions 3.8.012 through 3.9.001 suffers from arbitrary code execution, database credential disclosure, arbitrary user deletion, and cross site scripting vulnerabilities. ------------ BACKGROUND ------------ "iMember360is a WordPress plugin that will turn a normal...

WP e-Commerce Swipe <= 3.1.0 - Multiple XSS Issues

The last time it was checked the plugin was still affected and had been closed...

WP e-Commerce Swipe <= 3.1.0 - Multiple XSS Issues

The last time it was checked the plugin was still affected and had been closed. PoC...

CVE-2014-0361

The default configuration of IBM 4690 OS, as used in Toshiba Global Commerce Solutions 4690 POS and other products, hashes passwords with the ADXCRYPT algorithm, which makes it easier for context-dependent attackers to obtain sensitive information via unspecified cryptanalysis of an ADXCSOUF.DAT...

CVE-2014-0361

CVE-2014-0361 applies to IBM 4690 OS (used by Toshiba Global Commerce Solutions 4690 POS and related products). The issue stems from the ADXCRYPT password-hashing algorithm, which is vulnerable to known-plaintext attacks and hash collisions, enabling context-dependent attackers to obtain or deduc...