191 matches found
CVE-2021-3122-Details
CVE-2021-3122-详情 关于我们如何在AlohaPOS中发现一个CVE的博客文章。 https://www.sentinelone.com/blog/cve-2021-3122-how-we-caught-a-threat-actor-exploiting-ncr-pos-zero-day/...
CVE-2023-42362
CVE-2023-42362 作者：Abdelrahman Mohamed Mr-n0b3dy Linked-in：https://www.linkedin.com/in/abdelrhman-mohamed-ashraf-7bb43410b/ 漏洞名称：不受限制的文件上传，导致账户接管（ATO） 严重性：高危 产品：NCR teller web app 版本：4.4.0 描述： 不受限制的文件上传导致存储型跨站脚本（XSS）漏洞是此 Web 应用程序中发现的一个安全问题。该漏洞源于文件上传功能缺乏适当的输入验证。 影响： 攻击者可以上传包含 JavaScript...
📄 NCR Command Center Agent 16.3 Remote Command Execution
Proof of concept exploit for a remote command execution vulnerability in NCR Command Center Agent version 16.3 on Aloha POS/BOH servers. The vulnerability allows remote, unauthenticated attackers to execute arbitrary commands with SYSTEM privileges by sending a specially crafted XML document to...
Metasploit Wrap-Up 10/31/2025
New module content 3 ReDoc API Docs UI Exposed Author: Hamza Sahin Type: Auxiliary Pull request: 20594 contributed by HamzaSahin61 Path: scanner/http/redocexposed Description: Adds a module to detect publicly exposed ReDoc API documentation pages using read-only HTTP GET requests searching for...
📄 NCR Command Center Agent 16.3 Remote Code Execution
CMCAgent in NCR Command Center Agent version 16.3 on Aloha POS/BOH servers permits the submission of a runCommand parameter within an XML document sent to port 8089 that enables the remote, unauthenticated execution of an arbitrary command as SYSTEM, as exploited in the wild in 2020 and/or 2021...
CVE-2025-61429
An issue in NCR Atleos Terminal Manager ConfigApp v3.4.0 allows attackers to escalate privileges via a crafted request...
CVE-2025-61429
CVE-2025-61429 concerns NCR Atleos Terminal Manager (ConfigApp) v3.4.0. The connected sources describe a privilege-escalation issue exploitable by a crafted request, with CVSSv3.1 metrics indicating Network attack vector, low attack complexity, required privileges Low, no user interaction, and im...
CVE-2025-61429
An issue in NCR Atleos Terminal Manager ConfigApp v3.4.0 allows attackers to escalate privileges via a crafted request...
CVE-2025-61429
An issue in NCR Atleos Terminal Manager ConfigApp v3.4.0 allows attackers to escalate privileges via a crafted request...
NCR Atleos Terminal Manager ConfigApp 安全漏洞
NCR Atleos Terminal Manager ConfigApp is a terminal management tool module from NCR Atleos USA. A security vulnerability exists in NCR Atleos Terminal Manager ConfigApp version 3.4.0, which stems from improper handling of specially crafted requests and could lead to elevation of privilege...
EUVD-2020-2588
Malware in sbrugna...
EUVD-2020-2586
Malware in sbrugna...
EUVD-2017-8826
Malware in sbrugna...
EUVD-2018-17486
Malware in sbrugna...
EUVD-2020-2589
Malware in sbrugna...
EUVD-2020-29892
Malware in sbrugna...
EUVD-2023-53003
Malicious code in bioql PyPI...
EUVD-2023-51177
Malicious code in bioql PyPI...