📄 NCR Command Center Agent 16.3 Remote Command Execution

Proof of concept exploit for a remote command execution vulnerability in NCR Command Center Agent version 16.3 on Aloha POS/BOH servers. The vulnerability allows remote, unauthenticated attackers to execute arbitrary commands with SYSTEM privileges by sending a specially crafted XML document to...

Metasploit Wrap-Up 10/31/2025

New module content 3 ReDoc API Docs UI Exposed Author: Hamza Sahin Type: Auxiliary Pull request: 20594 contributed by HamzaSahin61 Path: scanner/http/redocexposed Description: Adds a module to detect publicly exposed ReDoc API documentation pages using read-only HTTP GET requests searching for...

📄 NCR Command Center Agent 16.3 Remote Code Execution

CMCAgent in NCR Command Center Agent version 16.3 on Aloha POS/BOH servers permits the submission of a runCommand parameter within an XML document sent to port 8089 that enables the remote, unauthenticated execution of an arbitrary command as SYSTEM, as exploited in the wild in 2020 and/or 2021...

CVE-2025-61429

An issue in NCR Atleos Terminal Manager ConfigApp v3.4.0 allows attackers to escalate privileges via a crafted request...

CVE-2025-61429

An issue in NCR Atleos Terminal Manager ConfigApp v3.4.0 allows attackers to escalate privileges via a crafted request...

CVE-2025-61429

CVE-2025-61429 concerns NCR Atleos Terminal Manager (ConfigApp) v3.4.0. The connected sources describe a privilege-escalation issue exploitable by a crafted request, with CVSSv3.1 metrics indicating Network attack vector, low attack complexity, required privileges Low, no user interaction, and im...

CVE-2025-61429

An issue in NCR Atleos Terminal Manager ConfigApp v3.4.0 allows attackers to escalate privileges via a crafted request...

NCR Atleos Terminal Manager ConfigApp 安全漏洞

NCR Atleos Terminal Manager ConfigApp is a terminal management tool module from NCR Atleos USA. A security vulnerability exists in NCR Atleos Terminal Manager ConfigApp version 3.4.0, which stems from improper handling of specially crafted requests and could lead to elevation of privilege...

EUVD-2020-29892

Malware in sbrugna...

EUVD-2020-2588

Malware in sbrugna...

EUVD-2020-2589

Malware in sbrugna...

EUVD-2017-8826

Malware in sbrugna...

EUVD-2020-2586

Malware in sbrugna...

EUVD-2018-17486

Malware in sbrugna...

EUVD-2023-51422

Malicious code in bioql PyPI...

EUVD-2023-53003

Malicious code in bioql PyPI...

EUVD-2023-51425

Malicious code in bioql PyPI...

EUVD-2023-51187

Malicious code in bioql PyPI...

EUVD-2023-36478

Malicious code in bioql PyPI...

EUVD-2023-51186

Malicious code in bioql PyPI...