Xpient POS / Iris 3.8 Cash Drawer Operation Remote Trigger

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Xpient Cash Drawer Operation Vulnerability 1. Advisory Information Title: Xpient Cash Drawer Operation Vulnerability Advisory ID: CORE-2013-0517 Advisory URL:...

Xpient - Cash Drawer Operation

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Xpient Cash Drawer Operation Vulnerability 1. Advisory Information Title: Xpient Cash Drawer Operation Vulnerability Advisory ID: CORE-2013-0517 Advisory URL:...

What “Dexter Malware” tells us about the future of POS security (It might just be P2PE)

The recently announced Dexter malware is targeting POS systems and once in, it collects sensitive credit card data and surreptitiously sends it off to attackers. While the details of this particular attack are not yet available, this is not the first time this general approach has been exploited...

Romanian POS Hackers Plead Guilty, Net $10 M from Scam

Two Romanian men pled guilty this week to charges they hacked into the point of sale systems of more than 200 restaurants, compromising the payment cards of 146,000 customers and amassing more than $10 million over the last few years. Included in those 200 stores were more than 150 Subway sandwic...

Flawed EMV Chip-and-PIN Protocol Paves Way To Fraudulent ATM and POS Transactions

A flaw in the EMV protocol which lays out the rules for chip-and-PIN card transactions at ATMs and point-of-sale terminals could enable persistent attackers to carry out bogus card transactions. Five Cambridge UK University researchers released a paper today with the gory details. Foremost among...

Researchers Find Serious Flaws in Popular Point-of-Sale System

A security researcher has found several serious vulnerabilities in a widely deployed point-of-sale system that enables an attacker to change transactions, steal card data and take other malicious actions. The attacks could be executed remotely under certain circumstances or done through a local...

Citing Terms Of Service, Google Takes Down Blog Of Iranian Security Researcher

An Iranian man who revealed a vulnerability in a widely used point of sale POS system in Iran had his blog confiscated by Google, which cited violations of its Terms of Service. A Google spokesman acknowledged that the company pulled down the Blogger site that Khosrow Zarefarid, an Iranian IT...

Iranian Takes Credit For POS Hack That Spills Three Million Bank Accounts

An Iranian national exposed confidential account details for some three million bank accounts in that country, prompting warnings from banking officials. Khosrow Zare Farid acquired the account information using a vulnerability in a widely deployed Iranian point-of-sale POS system used by banks...

HITB2011KUL - Chip & PIN - Protocol Analysis EMV POS

Document Title: =============== HITB2011KUL - Chip & PIN - Protocol Analysis EMV POS References: =========== Download: http://www.vulnerability-lab.com/resources/videos/399.wmv View: http://www.youtube.com/watch?v=5zFlqMFWYhc Release Date: ============= 2012-01-25 Vulnerability Laboratory ID VL-I...

HITB2011KUL - Chip & PIN - Protocol Analysis EMV POS

Document Title: =============== HITB2011KUL - Chip & PIN - Protocol Analysis EMV POS References: =========== Download: http://www.vulnerability-lab.com/resources/videos/399.wmv View: http://www.youtube.com/watch?v=5zFlqMFWYhc Release Date: ============= 2012-01-25 Vulnerability Laboratory ID VL-I...

Romanian Men Indicting For Hacking 150 Subway Restaurants

Four Romanian nationals were charged with hacking into the credit card processing systems of some 150 Subway sandwich shops and those of 50 other unnamed retailers, according to a copy of the indictment PDF. The four men and two co-conspirators, identified by their online pseudonyms,...

PT-2011-4675

Name of the Vulnerable Software and Affected Versions PHP Point Of Sale POS version 10.7 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is demonstrated by accessing files such as system/scaffolding/views/view.php, which...

CVE-2011-3785

CVE-2011-3785 affects PHP Point Of Sale (POS) 10.7. The vulnerability allows remote attackers to disclose sensitive information by directly requesting a PHP file, causing an error message that reveals the installation path (examples include system/scaffolding/views/view.php and similar files). Th...

CVE-2011-3785: Exposure of Sensitive Information to an Unauthorized Actor

PHP Point Of Sale POS 10.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/scaffolding/views/view.php and certain other files...

Radiant Systems Sued By Companies Affected by Hack

Seven restaurants in Louisiana and Mississippi, have filed a class-action suit against Georgia-based Radiant Systems for producing a point-of-sale POS system that they say was not compliant with payment card industry security standards and resulted in an undetermined number of customers having...

SuSE Update for mozilla SUSE-SA:2007:006

Check for the Version of mozilla OpenVAS Vulnerability Test $Id: gbsuse2007006.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for mozilla SUSE-SA:2007:006 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free softwar...

SuSE Update for apache2 SUSE-SA:2007:061

Check for the Version of apache2 OpenVAS Vulnerability Test $Id: gbsuse2007061.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for apache2 SUSE-SA:2007:061 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free softwar...

SuSE Update for AppArmor SUSE-SA:2007:015

Check for the Version of AppArmor OpenVAS Vulnerability Test $Id: gbsuse2007015.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for AppArmor SUSE-SA:2007:015 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

SuSE Update for libexif SUSE-SA:2007:039

Check for the Version of libexif OpenVAS Vulnerability Test $Id: gbsuse2007039.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for libexif SUSE-SA:2007:039 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free softwar...

SuSE Update for MozillaFirefox,mozilla,seamonkey SUSE-SA:2007:057

Check for the Version of MozillaFirefox,mozilla,seamonkey OpenVAS Vulnerability Test $Id: gbsuse2007057.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for MozillaFirefox,mozilla,seamonkey SUSE-SA:2007:057 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...