CVE-2023-42133

The CVE-2023-42133 issue affects PAX Android based POS devices. The vulnerability allows escalation of privilege via improperly configured scripts in the PayDroid runtime, requiring shell access with system account privileges to exploit. A firmware patch addressing this vulnerability is included ...

CVE-2023-42133

PAX Android based POS devices allow for escalation of privilege via improperly configured scripts. An attacker must have shell access with system account privileges in order to exploit this vulnerability. A patch addressing this issue was included in firmware version...

PAX Android based POS 安全漏洞

PAX Android based POS is a series of Android mobile payment terminals from China Paifu PAX. A security vulnerability exists in versions prior to PAX Android based POS 11.1.6120240226, which stems from incorrectly configured scripts that could lead to elevation of privilege...

Restaurant POS 1.0 SQL Injection

============================================================================================================================================= | Title : Restaurant POS v1.0 SQL injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 128.0.3 64 bi...

CVE-2024-40392

SourceCodester Pharmacy/Medical Store Point of Sale System Using PHP/MySQL and Bootstrap Framework with Source Code 1.0 was discovered to contain a SQL injection vulnerability via the name parameter under addnew.php...

CVE-2024-40392

CVE-2024-40392 affects SourceCodester’s Pharmacy/Medical Store Point of Sale System (Source Code 1.0). Multiple connected sources confirm a SQL injection vulnerability exploitable via the name parameter in addnew.php. The root cause is an unsafely interpolated SQL query in that endpoint (no vendo...

CVE-2024-40392

SourceCodester Pharmacy/Medical Store Point of Sale System Using PHP/MySQL and Bootstrap Framework with Source Code 1.0 was discovered to contain a SQL injection vulnerability via the name parameter under addnew.php...

VulnCheck KEV: CVE-2023-2215

A vulnerability classified as critical has been found in Campcodes Coffee Shop POS System 1.0. Affected is an unknown function of the file /admin/user/manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

Malicious code in about-pos (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6329 Malicious code in about-pos (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-38604

In the Linux kernel, the following vulnerability has been resolved: block: refine the EOF check in blkdeviomapbegin blkdeviomapbegin rounds down the offset to the logical block size before stashing it in iomap-offset and checking that it still is inside the inode size. Check the isize check to th...

CVE-2024-38604 block: refine the EOF check in blkdev_iomap_begin

In the Linux kernel, the following vulnerability has been resolved: block: refine the EOF check in blkdeviomapbegin blkdeviomapbegin rounds down the offset to the logical block size before stashing it in iomap-offset and checking that it still is inside the inode size. Check the isize check to th...

Cyber Signals: Inside the growing risk of gift card fraud

In the ever-evolving landscape of cyberthreats, staying ahead of malicious actors is a constant challenge. Microsoft Threat Intelligence has observed that gift cards are attractive targets for fraud and social engineering practices. Unlike credit or debit cards, there’s no customer name or bank...

CVE-2023-23021

Cross Site Scripting XSS vulnerability in sourcecodester oretnom23 pos point sale system 1.0, allows attackers to execute arbitrary code via the code, name, and description inputs in file Main.php...

PT-2024-11982 · Unknown · Sourcecodester Oretnom23 Pos Point Sale System

Name of the Vulnerable Software and Affected Versions: sourcecodester oretnom23 pos point sale system version 1.0 Description: The issue allows attackers to execute arbitrary code via the code, name, and description inputs in the file Main.php. This is a Cross Site Scripting XSS vulnerability...

CVE-2023-23021

CVE-2023-23021 describes a Cross Site Scripting (XSS) vulnerability in the sourcecodester Oretnom23 POS Point of Sale System v1.0. The issue arises from unsafely handling user-supplied input in the file Main.php through the fields code , name , and description , enabling an attacker to inject arb...

CVE-2024-20989

Oracle Hospitality Simphony (Simphony POS) is affected in versions 19.1.0–19.5.4 due to insufficient input validation in the POS component. The vulnerability allows a remote, unauthenticated attacker with network access (HTTP) to modify, add, or delete data and potentially gain unauthorized acces...

Kruxton 1.0 SQL Injection

Title: kruxton-1.0-Multiple-SQLi Author: nu11secur1ty Date: 04/15/2024 Vendor: https://www.mayurik.com/ Software: https://www.sourcecodester.com/php/16127/best-pos-management-system-php.html Reference: https://portswigger.net/web-security/sql-injection Description: The username parameter appears ...

CVE-2024-2384

The WooCommerce POS plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 1.4.11. This is due to the plugin not properly verifying the authentication and authorization of the current user This makes it possible for authenticated attackers, with...

CVE-2024-2384

CVE-2024-2384 affects the WooCommerce POS plugin for WordPress. Versions ≤ 1.4.11 expose potentially sensitive user data due to insufficient authentication/authorization checks, allowing authenticated users with customer-level access (or higher) to view other users’ information by abusing an orde...