CVE-2022-43086

CVE-2022-43086 affects Restaurant POS System v1.0. A SQL injection vulnerability exists in the file update_customer.php, allowing attacker-controlled input to influence SQL queries. Reported impact highlights high confidentiality impact with no integrity or availability impact per the provided me...

Point-of-sale malware used to steal 167,000 credit cards

In the 19 months between February 2021 and September 2022, two point-of-sale POS malware operators have stolen more than 167,000 payment records, mainly from the US, according to researchers at Group-IB. The researchers were able to retrieve information about infected machines and compromised...

167,000 stolen credit card numbers Exposed via PoS Malware

By Waqas The campaign was discovered in April 2022, but researchers believe the campaign occurred between February 2021 and September 8, 2022. This is a post from HackRead.com Read the original post: 167,000 stolen credit card numbers Exposed via PoS Malware...

Cybercriminals Used Two PoS Malware to Steal Details of Over 167,000 Credit Cards

Two point-of-sale PoS malware variants have been put to use by a threat actor to steal information related to more than 167,000 credit cards from payment terminals. According to Singapore-headquartered cybersecurity company Group-IB, the stolen data dumps could net the operators as much as $3.34...

October 11, 2022—KB5018454 (Monthly Rollup)

None None...

A look at the 2020–2022 ATM/PoS malware landscape

During the pandemic, lockdowns forced people to stay at home and do their shopping online, which was mirrored in point-of-sale PoS and ATM malware activity, as certain regions saw malicious transactions drop significantly. Now, as we predicted in last years forecast, many are returning to their...

Brazilian Prilex Hackers Resurfaced With Sophisticated Point-of-Sale Malware

A Brazilian threat actor known as Prilex has resurfaced after a year-long operational hiatus with an advanced and complex malware to steal money by means of fraudulent transactions. "The Prilex group has shown a high level of knowledge about credit and debit card transactions, and how software us...

Prilex: the pricey prickle credit card complex

Prilex is a Brazilian threat actor that has evolved out of ATM-focused malware into modular point-of-sale malware. The group was behind one of the largest attacks on ATMs in the country, infecting and jackpotting more than 1,000 machines, while also cloning in excess of 28,000 credit cards that...

CVE-2022-34578

Open Source Point of Sale v3.3.7 was discovered to contain an arbitrary file upload vulnerability via the Update Branding Settings page...

Malicious code in remote-pay-cloud-pos-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1be3a39c8e49e4f1f7cfd65472a31f91c8d5ed305ef6fa457563fb58432de98c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5744 Malicious code in remote-pay-cloud-pos-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1be3a39c8e49e4f1f7cfd65472a31f91c8d5ed305ef6fa457563fb58432de98c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

June 14, 2022—KB5014748 (Monthly Rollup)

None None...

There is an Assertion failure in MariaDB Server v10.9 and below via 'node->pcur->rel_pos == BTR_PCUR_ON' at /row/row0mysql.cc.

...

April 21, 2022—KB5012636 (OS Build 17763.2867) Preview

None None...

GHSA-RQJH-JP2R-59CJ NLTK Vulnerable to REDoS

NLTK is vulnerable to REDoS in some RegexpTaggers used in the functions getpostagger and maltregextagger...

Nextar C472 POS DLL Hijacking

/ Description: A vulnerability exists in windows that allows other applications dynamic link libraries to execute malicious code without the users consent, in the privelage context of the targeted application. Exploit Title: Nextar C472 POS DLL Hijacking Exploit nxmm.dll - mdmdregistration.dll...

CVE-2021-41492

Concretely, CVE-2021-41492 affects Sourcecodester Simple Cashiering System (POS) v1.0. It has SQL injection vulnerabilities in three vectors: (1) Product Code on the POS page, (2) the id parameter in manage_products, and (3) the t parameter in actions.php. The root cause is lack of input filterin...

CVE-2021-41492

Multiple SQL Injection vulnerabilities exist in Sourcecodester Simple Cashiering System POS 1.0 via the 1 Product Code in the pos page in cashiering. 2 id parameter in manageproducts and the 3 t paramater in actions.php...

Ultimate POS 4.4 - 'name' Cross-Site Scripting (XSS)

Exploit Title: Ultimate POS 4.4 - 'name' Cross-Site Scripting XSS Date: 2021-10-26 Exploit Author: Vulnerability Lab Vendor Homepage: https://ultimatefosters.com/docs/ultimatepos/ Version: 4.4 Document Title: =============== Ultimate POS v4.4 - Products Persistent XSS Vulnerability References...

Ultimate POS 4.4 - (name) Cross-Site Scripting Vulnerability

Exploit Title: Ultimate POS 4.4 - 'name' Cross-Site Scripting XSS Vendor Homepage: https://ultimatefosters.com/docs/ultimatepos/ Version: 4.4 Product & Service Introduction: =============================== The Ultimate POS is a erp, stock management, point of sale & invoicing web-application. The...