CVE-2025-65320

CVE-2025-65320 Titre Stockage en clair de données de licence sensibles dans la mémoire du processus dans Abacre Restaurant Point of Sale POS Aperçu Une vulnérabilité existe dans Abacre Restaurant Point of Sale POS versions = 15.0.0.1656 lorsque des données de licence sensibles sont stockées en...

CVE-2024-13513

Oliver POS – إضافة نقاط البيع POS لووكومرس = 2.4.2.3 - كشف معلومات حساسة يؤدي إلى تصعيد الامتيازات الاستيلاء على الحساب CVE-2024-13513 إضافة Oliver POS – نقاط البيع POS لووكومرس في ووردبريس معرضة لثغرة كشف المعلومات الحساسة في جميع الإصدارات حتى 2.4.2.3 وما يتضمنه عبر وظيفة التسجيل logging. وهذا...

CVE-2018-2636

Installation root@kitploit: $ pip install --user requests argparse unicodedata Informations POC pour CVE-2018-2636. Exemple d'utilisation root@kitploit: python eGw.py -H 127.0.0.1 -P 8080 -i ... Obtenons des informations sur le serveur ! Votre instance est vulnérable à CVE-2018-2636 ... Liens...

POS Codekop v2.0 - Cross Site Scripting

POS Codekop v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the nmmember parameter at print.php. id: CVE-2023-36346 info: name: POS Codekop v2.0 - Cross Site Scripting author: r3Y3r53 severity: medium description: | POS Codekop v2.0 was discovered to contain ...

CVE-2021-3122-Details

CVE-2021-3122-Details مقالة مدونة حول كيفية اكتشافنا لثغرة CVE في AlohaPOS. https://www.sentinelone.com/blog/cve-2021-3122-how-we-caught-a-threat-actor-exploiting-ncr-pos-zero-day/...

CVE-2026-19081 Missing Authorization Allows Unauthorized Access to Critical POS Functions in Gastromenum's Gastromenum Ticket and QR Menu System

Missing Authorization vulnerability in Gastromenum Gastromenum Ticket and QR Menu System allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Gastromenum Ticket and QR Menu System: before 2026.08.31...

CVE-2026-19081

CVE-2026-19081 is a Missing Authorization vulnerability in Gastromenum Ticket and QR Menu System , a point-of-sale (POS) and QR menu product. The flaw allows an authenticated low-privilege network user to access functionality not properly constrained by ACLs, specifically enabling unauthorized ac...

primefaces

De la Table au Code : Un Voyage à Travers la Vulnérabilité RCE dans le POS pour Restaurants Cette fois-ci, nous sommes tombés par hasard sur une vulnérabilité présente dans plusieurs applications de POS pour restaurants XETUX, qui est une solution de surveillance et d'automatisation pour...

CVE-2026-19043

CVE-2026-19043 is a Missing Authorization (ACL bypass) vulnerability in Menulux Portal by Menulux Software Inc. , affecting the critical POS management functions where access is not properly constrained by access control lists. This allows an authenticated low-privilege user to access functionali...

CVE-2026-19043 Authorization Bypass Critical POS Management Functions in Menulux Software's Menulux Portal

Missing Authorization vulnerability in Menulux Software Inc. Menulux Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Menulux Portal: before 20260903211448...

POS Codekop v2.0 - Broken Authentication

A broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0 allows unauthenticated attackers to download selling data. id: CVE-2023-36347 info: name: POS Codekop v2.0 - Broken Authentication author: princechaddha severity: high description: | A broken authentication mechanism ...

CVE-2025-67263

CVE-2025-67263 - Cross-site scripting XSS stocké dans Abacre Retail Point of Sale 14.0.0.396 Abacre Retail Point of Sale 14.0.0.396 est affecté par une vulnérabilité de cross-site scripting XSS stocké dans le module Clients. L'application ne parvient pas à assainir correctement les saisies...

CVE-2025-67261

CVE-2025-67261 - Injection SQL aveugle basée sur le contenu dans Abacre Retail Point of Sale 14.0.0.396 Abacre Retail Point of Sale 14.0.0.396 est vulnérable à une injection SQL aveugle basée sur le contenu. La vulnérabilité se trouve dans la fonction Recherche de la page Commandes. La fonction «...

CVE-2025-65320

CVE-2025-65320 CVE-2025-65320: تخزين المعلومات الحساسة كنص صريح في الذاكرة في برنامج Abacre Restaurant Point of Sale POS. جميع إصدارات Abacre Restaurant Point of Sale POS حتى الإصدار 15.0.0.1656 معرضة لثغرة تخزين المعلومات الحساسة كنص صريح في الذاكرة. يترك التطبيق مفاتيح ترخيص صالحة مرتبطة بالجها...

CVE-2026-46369 Nimiq: Validity store off by one error

Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Through 1.5.0, the validity store uses a strict lower-bound comparison that expires a stored transaction too early relative to Transaction::isvalidat, allowing a remote attacker to repl...

CVE-2026-46369

Nimiq (Rust implementation of the Nimiq Proof-of-Stake protocol, Albatross consensus) is affected by an off-by-one error in its validity store through version 1.5.0 . The store uses a strict lower-bound comparison that expires a stored transaction one block too early relative to Transaction::is_v...

Zombie Card Attack Can Revive Expired Visa Cards for Contactless Payments

Researchers at the University of Massachusetts Amherst have demonstrated an attack that revives expired Visa contactless credit cards for real in-store purchases by rewriting the expiration date a point-of-sale POS terminal reads over near-field communication NFC, without breaking any of the card...

CVE-2026-60590

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications component: POS. Supported versions that are affected are 19.8-19.8.5, 19.9-19.9.3 and 19.10-19.10.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2026-60591

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications component: POS. Supported versions that are affected are 19.8-19.8.5, 19.9-19.9.3 and 19.10-19.10.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

EUVD-2026-61391

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications component: POS. Supported versions that are affected are 19.8-19.8.5, 19.9-19.9.3 and 19.10-19.10.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...