Design/Logic Flaw

IBM Financial Transaction Manager FTM for ACH Services, Check Services and Corporate Payment Services CPS 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading README files...

CVE-2016-0231

IBM Financial Transaction Manager FTM for ACH Services, Check Services and Corporate Payment Services CPS 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading exception details in error logs...

CVE-2016-0232

IBM Financial Transaction Manager FTM for ACH Services, Check Services and Corporate Payment Services CPS 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading README files...

SQL VSS Writer is missing: databases will be backed up in crash-consistent state and transaction log processing will be skipped

Challenge A job displays the warning: SQL VSS Writer is missing: databases will be backed up in crash-consistent state and transaction log processing will be skipped Solution Support Scope Please note that the warning message displayed by Veeam Backup & Replication is a courtesy notification...

F5 Networks BIG-IP : Linux kernel vulnerabilities (K62700573)

CVE-2010-5313 Race condition in arch/x86/kvm/x86.c in the Linux kernel before 2.6.38 allows L2 guest OS users to cause a denial of service L1 guest OS crash via a crafted instruction that triggers an L2 emulation failure report, a similar issue to CVE-2014-7842. CVE-2014-7842 Race condition in...

Threat Outbreak Alert RuleID20535: Email Messages Distributing Malicious Software on January 19, 2016

Medium Alert ID: 43076 First Published: 2016 January 19 14:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20535 may contain the following files: Name |...

Coinbase: Potential for Double Spend via Sign Message Utility

Hi, There is an unlikely but theoretically exploitable vulnerability is caused by allowing users to sign messages with their addresses. So far I have not been able to exploit this, but I believe that it is exploitable. On coinbse.com, the user can see a list of their addresses here. When they cli...

Threat Outbreak Alert RuleID19353: Email Messages Distributing Malicious Software on November 12, 2015

Medium Alert ID: 42063 First Published: 2015 November 13 15:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19353 may contain the following files: Name |...

Threat Outbreak Alert RuleID18835: Email Messages Distributing Malicious Software on November 17, 2015

Medium Alert ID: 41616 First Published: 2015 October 20 20:23 GMT Last Updated: 2015 November 18 14:00 GMT Version: 10 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID1883...

Threat Outbreak Alert RuleID18772: Email Messages Distributing Malicious Software on October 16, 2015

Medium Alert ID: 41583 First Published: 2015 October 19 13:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18772 may contain the following files: Name |...

Oracle: Security Advisory (ELSA-2014-0475)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple iOS Apple Pay Terminal Sensitive Transaction Information Acquisition Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability exists in Apple iOS that allows a remote Apple Pay terminal to access limited, recent transaction information while the target user is making a payment...

CVE-2015-5916

The Apple Pay component in Apple iOS before 9 allows remote terminals to obtain sensitive recent-transaction information during payments by leveraging the transaction-log feature...

Design/Logic Flaw

The Apple Pay component in Apple iOS before 9 allows remote terminals to obtain sensitive recent-transaction information during payments by leveraging the transaction-log feature...

CVE-2015-5916

The Apple Pay component in Apple iOS before 9 allows remote terminals to obtain sensitive recent-transaction information during payments by leveraging the transaction-log feature...

SQL Injection Vulnerability in Xi'an Bureau Veritas Standard Edition Transaction Tenure Management System

Xi'an BitTorrent Software Co., Ltd. is a company that researches the business of government real estate management, and the standard version of the Transaction Tenure Management System is one of the management systems of the company. A SQL injection vulnerability exists in the standard version of...

Multiple Storage-based Cross-site Scripting Vulnerabilities in Shenzhen Yifa Everlasting Yifa Cloud OA System

Yifa cloud OA office software integrates the most advanced management ideas, standardized management and value-added utilization of workflow, information flow and knowledge management to provide users with an advanced and efficient information work platform. The system is completely designed with...

Researchers Unveil Square Reader Mobile POS Hacks

It wasn’t long ago when hacking a point-of-sale system meant deploying a RAM scraper at a retailer, sitting back and watching the credit card numbers roll in. Now that POS has gone mobile with vendors such as Square, Intuit, Revel and others using hardware fobs connected to smartphones and tablet...

bind: TKEY query handling flaw leading to denial of service

A flaw was found in the way BIND handled requests for TKEY DNS resource records. A remote attacker could use this flaw to make named functioning as an authoritative DNS server or a DNS resolver exit unexpectedly with an assertion failure via a specially crafted DNS request packet...

bind: TKEY query handling flaw leading to denial of service

A flaw was found in the way BIND handled requests for TKEY DNS resource records. A remote attacker could use this flaw to make named functioning as an authoritative DNS server or a DNS resolver exit unexpectedly with an assertion failure via a specially crafted DNS request packet...