CVE-2014-7892

The OLE Point of Sale OPOS drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSMSR.ocx for Mini MSR magnetic stripe readers, Retail Integrated Dual-Head MSR magnetic stripe readers, Integrated Single Head MSR w/o SRED...

CVE-2014-7890

The CVE-2014-7890 issue affects HP Point of Sale systems using OPOS drivers (OPOS CCOs) prior to version 1.13.003. The root cause is in OPOSToneIndicator.ocx used by HP POS Keyboard and POS Keyboard with MSR, allowing remote code execution when an attacker can influence inputs to the Open method ...

CVE-2014-7888

The OLE Point of Sale OPOS drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSMICR.ocx for PUSB Thermal Receipt printers, SerialUSB Thermal Receipt printers, Hybrid POS printers with MICR, Value PUSB Receipt printers,...

CVE-2014-7889

HP OPOS OPOSLineDisplay.ocx in HP Point of Sale Windows PCs (before v1.13.003) is vulnerable to remote code execution due to an unspecified flaw in the Open method of OPOSLineDisplay.ocx. The HP Security Bulletin and ZDI advisory tie CVE-2014-7889 to remote code execution via OPOSLineDisplay.ocx ...

CVE-2014-7891

The CVE-2014-7891 issue affects HP Point of Sale PCs running Windows with OPOS Drivers, specifically the OPOSPOSKeyboard.ocx component. The Open method input validation flaw leads to a buffer overflow that could enable remote code execution. Products impacted include OPOS CCO drivers (pre‑1.13.00...

CVE-2014-7895

CVE-2014-7895 affects HP Point of Sale Windows PCs with OPOS Common Control Objects (OPOS CCO) drivers older than 1.13.003. The vulnerability is in OPOSCashDrawer.ocx and enables remote code execution via the OPOS driver family (notably on PUSB/SERIAL USB receipts, MICR/hybrid printers, and relat...

New POS Malware Uses Mailslots to Avoid Detection

New point-of-sale malware, LogPOS, has been using technology that evades detection by allowing the malware to inject code and act like a client while it shuttles stolen credit card numbers off to its command and control server. The technology, Microsoft Windows’ mailslots, isn’t new by any means...

British security researchers have found VISA wireless payments vulnerability-vulnerability warning-the black bar safety net

Recently, UK Newcastle University, security researcher in the VISA contactless payment card, found a security vulnerability, exploit the vulnerability the attacker is simply using the phone from someone else's wallet to steal large amounts of cash. Contactless payment card using the encryption ch...

Hackers Can Steal $999,999.99 from Visa Contactless Payment Cards

Security researchers from Newcastle University in the UK have found a way to steal larger amounts of money from people's pockets using just a mobile phone, due to a security glitch Visa’s contactless payment cards. Contactless payment cards use a cryptoprocessor and RFID technology to perform...

POS Service Confirms Goodwill Breach Lasted 18 Months

Third-party payment vendor C&K Systems released further details this week regarding a breach that affected its systems for 18 months and went on to affect customers who shopped at Goodwill, in addition to two unnamed retailers. The company provided an update on the breach via a press release Mond...

Home Depot Data Breach Prompts Look at Backoff PoS Malware

Naturally, early speculation on the malware culprit behind the possible Home Depot data breach has leaned toward Backoff. The point-of-sale malware, one of many used against payment terminals, has recently been blamed for more than 1,000 attacks on businesses, prompting the U.S. Secret Service to...

Home Depot Investigating Massive Data Breach

Home Depot may be the latest retailer to suffer a costly data breach, and if early indications are correct, the hackers may have been on the home giant’s network longer than hackers were on Target’s systems, and a greater number of consumers may be at risk. A Home Depot representative confirmed...

UPS Admits 51 Stores Hit With Malware For Five Months

The list of corporations that have been victimized by credit card stealing malware in 2014 grew a little longer this week as UPS announced that 51 of its stores suffered a “broad-based malware intrusion” earlier this spring. The company disclosed the breach – which affected franchised locations o...

Grocery Stores 'Supervalu' and 'Albertsons' Hacked for Credit Card Data

Albertson’s and SuperValu - Two nation’s most popular supermarket store chains announced last weekend that a data breach may have revealed the credit and debit card information of their customers at a number of grocery store locations in more than 18 states. Minnesota-based Supervalu announced...

Brute-Forcing Botnet Sniffs Out Lax POS Systems

Over a two-week time span earlier this year, a botnet composed of thousands of computers actively sought out and broke into exposed point of sale POS systems that used poor or default passwords. The botnet, dug up and dubbed BrutPOS by security firm FireEye, leveraged more than 5,000 machines and...

BrutPOS Botnet Compromises insecure RDP Servers at Point-of-Sale Systems

Cyber criminals are infecting thousands of computers around the world with malware and are utilizing those compromised machines to break into Point-of-Sale PoS terminals using brute-force techniques, and the attackers have already compromised 60 PoS terminals by brute-force attacks against...

Remote Access Hack Compromises POS Vendor

A popular point of sale vendor may have suffered a data breach earlier this year that could affect customers of a handful of Pacific Northwest restaurants. Vancouver, Wash.-based Information Systems & Supplies, a supplier of POS systems to restaurants such as Dairy Queen, Buffalo Wild Wings and...

Easy POS System - SQL Injection (login.php)

No description provided by source...

i-pos Storefront 1.3 - 'index.asp' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29471/info i-pos Storefront is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

CoolShot E-Lite POS 1.0 Login SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26558/info E-lite POS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...