34 matches found
primefaces
테이블에서 코드로: 레스토랑 POS RCE 취약점을 통한 여행 이번 기회에 우리는 우연히 레스토랑 POS 애플리케이션 여러 곳에 존재하는 취약점을 발견했습니다 XETUX. 이는 레스토랑 모니터링 및 자동화 솔루션입니다. 파나마에서는 여러 레스토랑에서 널리 사용되는 도구입니다. 해당 취약점은 RCE원격 코드 실행로, 공격자가 인증 없이 코드를 실행하고 대상에서 권한을 획득할 수 있습니다. 1. 열거 Xetux 애플리케이션에 존재하는 라이브러리를 발견한 후, 해당 라이브러리는 PDF 생성을 담당하는 PrimeFaces라고 불립니다...
CVE-2025-65320
CVE-2025-65320 제목 Abacre Restaurant Point of Sale POS의 프로세스 메모리에 민감한 라이선스 자료가 평문으로 저장됨 개요 Abacre Restaurant Point of Sale POS 버전 = 15.0.0.1656에서 소프트웨어 활성화 워크플로 중 민감한 라이선스 데이터가 프로세스 메모리에 평문으로 저장 되는 취약점이 존재합니다. 라이선스 활성화 절차에서 애플리케이션은 특정 시스템에 대해 소프트웨어 설치를 검증하기 위해 장치에 바인딩된 라이선스 키 를 생성하고 처리합니다. 그러나 이러한...
CVE-2025-65320
CVE-2025-65320 CVE-2025-65320: Abacre Restaurant Point of Sale POS におけるメモリ内の機密情報の平文保存。 Abacre Restaurant Point of Sale POS のバージョン 15.0.0.1656...
EUVD-2024-17029
Malicious code in bioql PyPI...
EUVD-2024-17028
Malicious code in bioql PyPI...
CVE-2024-1268
A vulnerability, which was classified as critical, was found in CodeAstro Restaurant POS System 1.0. This affects an unknown part of the file updateproduct.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
CVE-2022-43086
Restaurant POS System v1.0 was discovered to contain a SQL injection vulnerability via updatecustomer.php...
CVE-2022-43085
An arbitrary file upload vulnerability in addproduct.php of Restaurant POS System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2024-1268
A vulnerability, which was classified as critical, was found in CodeAstro Restaurant POS System 1.0. This affects an unknown part of the file updateproduct.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
CVE-2024-1268
A vulnerability, which was classified as critical, was found in CodeAstro Restaurant POS System 1.0. This affects an unknown part of the file updateproduct.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
Design/Logic Flaw
A vulnerability, which was classified as critical, was found in CodeAstro Restaurant POS System 1.0. This affects an unknown part of the file updateproduct.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
CVE-2024-1268
CVE-2024-1268 concerns CodeAstro Restaurant POS System 1.0. The vulnerability affects an unknown part of the file update_product.php, enabling an unrestricted upload that could be triggered remotely. Multiple sources (NVD, Red Hat, CVE listings, PRION) describe it as a critical issue with potenti...
CVE-2024-1268 CodeAstro Restaurant POS System update_product.php unrestricted upload
A vulnerability, which was classified as critical, was found in CodeAstro Restaurant POS System 1.0. This affects an unknown part of the file updateproduct.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
CVE-2024-1268 CodeAstro Restaurant POS System update_product.php unrestricted upload
A vulnerability, which was classified as critical, was found in CodeAstro Restaurant POS System 1.0. This affects an unknown part of the file updateproduct.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
CVE-2024-1267
A vulnerability, which was classified as problematic, has been found in CodeAstro Restaurant POS System 1.0. Affected by this issue is some unknown functionality of the file createaccount.php. The manipulation of the argument Full Name leads to cross site scripting. The attack may be launched...
CVE-2024-1267
A vulnerability, which was classified as problematic, has been found in CodeAstro Restaurant POS System 1.0. Affected by this issue is some unknown functionality of the file createaccount.php. The manipulation of the argument Full Name leads to cross site scripting. The attack may be launched...
Cross site scripting
A vulnerability, which was classified as problematic, has been found in CodeAstro Restaurant POS System 1.0. Affected by this issue is some unknown functionality of the file createaccount.php. The manipulation of the argument Full Name leads to cross site scripting. The attack may be launched...
CVE-2024-1267
The connected documents confirm CVE-2024-1267 affects CodeAstro Restaurant POS System v1.0, where the file create_account.php is vulnerable through manipulation of the Full Name parameter, causing cross-site scripting. The vulnerability can be exploited remotely and the exploit has been publicly ...
CVE-2024-1267 CodeAstro Restaurant POS System create_account.php cross site scripting
A vulnerability, which was classified as problematic, has been found in CodeAstro Restaurant POS System 1.0. Affected by this issue is some unknown functionality of the file createaccount.php. The manipulation of the argument Full Name leads to cross site scripting. The attack may be launched...