CVE-2016-5539

Unspecified vulnerability in the Oracle Retail Xstore Payment component in Oracle Retail Applications 1.x allows local users to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2016-5539

CVE-2016-5539 affects Oracle Retail Xstore Payment component within Oracle Retail Applications 1.x. Descriptions across sources indicate an unspecified vulnerability allowing local users to impact confidentiality, integrity, and availability via unknown attack vectors. Connected documents corrobo...

CVE-2016-5540

CVE-2016-5540 corresponds to an unspecified vulnerability in the Oracle Retail Xstore Payment component of Oracle Retail Applications 1.x. Affected product/component: Oracle Retail Xstore Payment within Oracle Retail Applications 1.x. The available connected sources do not disclose root cause det...

Starbucks: CSRF vulnerability in saving payment card on store.starbucks.com (COBilling -AddCreditCard)

Hi, I noticed a CSRF issue that associated with card saving. It is possible for to save card details and can be used for quick payments while purchasing. The result will be a remote attacker can trick users to use some other cards that may silently led to loss of money in which actully it is not...

OOracle Retail Applications Unspecified Vulnerability in Oracle Retail Xstore Payment

Oracle Retail Applications is the United States Oracle Oracle company's set of retail applications store solutions. Oracle Retail Xstore Payment is one of the retail service payment pieces. A local security vulnerability exists in the Security subcomponent of the Oracle Retail Xstore Payment...

Unspecified Vulnerability in Oracle Retail Xstore Payment Component

Oracle Retail Applications is a set of retail applications store solutions from Oracle Corporation. Oracle Retail Xstore Payment is one of the retail point-of-service payment management components. A security vulnerability exists in Oracle Retail Xstore Payment version 1.x, which can be exploited...

Magento Community Edition 2.x < 2.0.4 Multiple Vulnerabilities

Binary data 9693.prm...

Operations of a Brazilian Payment Card Fraud Group

Introduction Brazil has been designated a major hub for financially motivated eCrime threat activity. Brazilian threat actors are targeting domestic and foreign entities and individuals, with frequent targeting of U.S. assets. The country routinely places in "Top Five" lists of various global cyb...

Operations of a Brazilian Payment Card Fraud Group

Introduction Brazil has been designated a major hub for financially motivated eCrime threat activity. Brazilian threat actors are targeting domestic and foreign entities and individuals, with frequent targeting of U.S. assets. The country routinely places in "Top Five" lists of various global cyb...

Operations of a Brazilian Payment Card Fraud Group

Introduction Brazil has been designated a major hub for financially motivated eCrime threat activity. Brazilian threat actors are targeting domestic and foreign entities and individuals, with frequent targeting of U.S. assets. The country routinely places in "Top Five" lists of various global cyb...

Vera Bradley Retail Chain Breached

Retailer Vera Bradley warned customers on Wednesday of a compromise of its point-of-sale system that allowed hackers to make off with an undisclosed number of credit card records. The breach impacts only retail customers who shopped at one of 159 Vera Bradley locations between July 25 and Sept. 2...

Threat Outbreak Alert RuleID25415: Email Messages Distributing Malicious Software on October 5, 2016

Medium Alert ID: 49194 First Published: 2016 October 5 17:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25415 may contain the following files: Name |...

Vendetta Brothers, Inc. – A Window Into the Business of the Cybercriminal Underground

FireEye iSIGHT Intelligence has been tracking a pair of cybercriminals that we refer to as the “Vendetta Brothers.” This enterprising duo uses various strategies to compromise point-of-sale systems, steal payment card information and sell it on their underground marketplace “Vendetta World.” The...

Vendetta Brothers, Inc. – A Window Into the Business of the Cybercriminal Underground

FireEye iSIGHT Intelligence has been tracking a pair of cybercriminals that we refer to as the “Vendetta Brothers.” This enterprising duo uses various strategies to compromise point-of-sale systems, steal payment card information and sell it on their underground marketplace “Vendetta World.” The...

Vendetta Brothers, Inc. – A Window Into the Business of the Cybercriminal Underground

FireEye iSIGHT Intelligence has been tracking a pair of cybercriminals that we refer to as the “Vendetta Brothers.” This enterprising duo uses various strategies to compromise point-of-sale systems, steal payment card information and sell it on their underground marketplace “Vendetta World.” The...

Threat Outbreak Alert RuleID25094: Email Messages Distributing Malicious Software on September 18, 2016

Medium Alert ID: 48943 First Published: 2016 September 19 13:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25094 may contain the following files: Name ...

FBI Encouraging Ransomware Victims To Report Infections

The Federal Bureau of Investigation this week urged victims of ransomware to report infections to federal law enforcement in hopes of better understanding the threat. The agency, in tandem with the Internet Crime Complaint Center IC3, issued a public service announcement on Thursday asking...

Threat Outbreak Alert RuleID25030: Email Messages Distributing Malicious Software on September 16, 2016

Medium Alert ID: 48928 First Published: 2016 September 16 14:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25030 may contain the following files: Name ...

OLX: Stored XSS in buy topup OLX Gold Credits

in this link: https://www.olx.ph/payment/wallet/topupaccount/ 1.input in 2 name: " onfocus=prompt1 autofocus bad=" 2.Select a payment 3.tick I accept OLX's Terms and Conditions 4.Click Continue Then go back to this page https://www.olx.ph/payment/wallet/topupaccount/, XSS :...

324,000 Financial Records with CVV Numbers Stolen From A Payment Gateway

Around 324,000 users have likely had their payment records stolen either from payment processor BlueSnap or its customer Regpack; however, neither of the company has admitted a data breach. BlueSnap is a payment provider which allows websites to take payments from customers by offering merchant...