Udemy: leak receipt of another user

A attacker can leak receipt information of another user by using the forced browse. by changing single char here i see another user's receipt https://www.udemy.com/dashboard/pdf-receipt/?invnum=PD-CC-66574B6C57334B626B366B39...

[security bulletin] HPSBHF03279 rev.1 - HP Point of Sale PCs Running Windows with OPOS Drivers, Remote Execution of Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04583185 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04583185 Version: 1 HPSBHF03279 rev....

CVE-2014-7895

The OLE Point of Sale OPOS drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSCashDrawer.ocx for PUSB Thermal Receipt printers, SerialUSB Thermal Receipt printers, Hybrid POS printers with MICR, Value PUSB Receipt...

Code injection

The OLE Point of Sale OPOS drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSCheckScanner.ocx for PUSB Thermal Receipt printers, SerialUSB Thermal Receipt printers, Hybrid POS printers with MICR, Value PUSB Receipt...

Code injection

The OLE Point of Sale OPOS drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSPOSPrinter.ocx for PUSB Thermal Receipt printers, SerialUSB Thermal Receipt printers, Hybrid POS printers with MICR, Value PUSB Receipt...

Code injection

The OLE Point of Sale OPOS drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSCashDrawer.ocx for PUSB Thermal Receipt printers, SerialUSB Thermal Receipt printers, Hybrid POS printers with MICR, Value PUSB Receipt...

CVE-2014-7888

The OLE Point of Sale OPOS drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSMICR.ocx for PUSB Thermal Receipt printers, SerialUSB Thermal Receipt printers, Hybrid POS printers with MICR, Value PUSB Receipt printers,...

CVE-2014-7894

The OLE Point of Sale OPOS drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSPOSPrinter.ocx for PUSB Thermal Receipt printers, SerialUSB Thermal Receipt printers, Hybrid POS printers with MICR, Value PUSB Receipt...

CVE-2014-7888

The OLE Point of Sale OPOS drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSMICR.ocx for PUSB Thermal Receipt printers, SerialUSB Thermal Receipt printers, Hybrid POS printers with MICR, Value PUSB Receipt printers,...

CVE-2014-7895

The OLE Point of Sale OPOS drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSCashDrawer.ocx for PUSB Thermal Receipt printers, SerialUSB Thermal Receipt printers, Hybrid POS printers with MICR, Value PUSB Receipt...

CVE-2014-7895

CVE-2014-7895 affects HP Point of Sale Windows PCs with OPOS Common Control Objects (OPOS CCO) drivers older than 1.13.003. The vulnerability is in OPOSCashDrawer.ocx and enables remote code execution via the OPOS driver family (notably on PUSB/SERIAL USB receipts, MICR/hybrid printers, and relat...

Threat Outbreak Alert RuleID13734: Email Messages Distributing Malicious Software on February 26, 2015

Medium Alert ID: 37604 First Published: 2015 February 26 18:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13734 may contain the following files: Name |...

Threat Outbreak Alert RuleID12643: Email Messages Distributing Malicious Software on December 1, 2014

Medium Alert ID: 36558 First Published: 2014 December 1 17:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12643 may contain the following files: Name |...

Threat Outbreak Alert RuleID11446: Email Messages Distributing Malicious Software on September 8, 2014

Medium Alert ID: 35632 First Published: 2014 September 9 13:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11446 may contain the following files: Name |...

Threat Outbreak Alert: Fake Payment Receipt Notification Email Messages on April 28, 2014

Medium Alert ID: 33977 First Published: 2014 April 29 18:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment receipt for the recipient. The text in the email message attempts to convince the recipient to open th...

Threat Outbreak Alert: Fake Payment Receipt Email Messages on March 1, 2014

Medium Alert ID: 33146 First Published: 2014 March 3 15:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment receipt for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Payment Receipt Notification Email Messages on March 3, 2014

Medium Alert ID: 33158 First Published: 2014 March 3 15:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment transaction notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Tax Receipt Notification Email Messages on February 21, 2014

Medium Alert ID: 32976 First Published: 2014 February 24 21:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a tax receipt for the recipient. The text in the email message attempts to convince the recipient to follow a...

Threat Outbreak Alert: Fake Payment Receipt Notification Email Messages on February 21, 2014

Medium Alert ID: 32967 First Published: 2014 February 21 17:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment notification for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Payment Transaction Notice Email Messages on February 21, 2014

Medium Alert ID: 32966 First Published: 2014 February 21 17:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment transaction notice for the recipient. The text in the email message attempts to convince the...