215 matches found
CVE-2021-3122-Details
CVE-2021-3122-Detalles Entrada de blog sobre cómo encontramos un CVE en AlohaPOS. https://www.sentinelone.com/blog/cve-2021-3122-how-we-caught-a-threat-actor-exploiting-ncr-pos-zero-day/...
CVE-2023-42362
CVE-2023-42362 Autor: Abdelrahman Mohamed Mr-n0b3dy Linked-in: https://www.linkedin.com/in/abdelrhman-mohamed-ashraf-7bb43410b/ Nombre de la vulnerabilidad: Carga de archivos sin restricciones que condujo a ATO Gravedad: Alta Producto: Aplicación web NCR Teller Versión: 4.4.0 Descripción: La...
📄 NCR Command Center Agent 16.3 Remote Command Execution
Proof of concept exploit for a remote command execution vulnerability in NCR Command Center Agent version 16.3 on Aloha POS/BOH servers. The vulnerability allows remote, unauthenticated attackers to execute arbitrary commands with SYSTEM privileges by sending a specially crafted XML document to...
Metasploit Wrap-Up 10/31/2025
New module content 3 ReDoc API Docs UI Exposed Author: Hamza Sahin Type: Auxiliary Pull request: 20594 contributed by HamzaSahin61 Path: scanner/http/redocexposed Description: Adds a module to detect publicly exposed ReDoc API documentation pages using read-only HTTP GET requests searching for...
📄 NCR Command Center Agent 16.3 Remote Code Execution
CMCAgent in NCR Command Center Agent version 16.3 on Aloha POS/BOH servers permits the submission of a runCommand parameter within an XML document sent to port 8089 that enables the remote, unauthenticated execution of an arbitrary command as SYSTEM, as exploited in the wild in 2020 and/or 2021...
CVE-2025-61429
An issue in NCR Atleos Terminal Manager ConfigApp v3.4.0 allows attackers to escalate privileges via a crafted request...
CVE-2025-61429
The NCR Atleos Terminal Manager (ConfigApp) v3.4.0 is vulnerable to a privilege escalation issue caused by improper handling of specially crafted requests. Attackers with low privileges can exploit this vulnerability without user interaction to obtain elevated access rights. CWE-269 (Improper Pri...
CVE-2025-61429
An issue in NCR Atleos Terminal Manager ConfigApp v3.4.0 allows attackers to escalate privileges via a crafted request...
CVE-2025-61429: Improper Privilege Management
An issue in NCR Atleos Terminal Manager ConfigApp v3.4.0 allows attackers to escalate privileges via a crafted request...
CVE-2025-61429
An issue in NCR Atleos Terminal Manager ConfigApp v3.4.0 allows attackers to escalate privileges via a crafted request...
NCR Atleos Terminal Manager ConfigApp 安全漏洞
NCR Atleos Terminal Manager ConfigApp is a terminal management tool module from NCR Atleos USA. A security vulnerability exists in NCR Atleos Terminal Manager ConfigApp version 3.4.0, which stems from improper handling of specially crafted requests and could lead to elevation of privilege...
EUVD-2020-2588
Malware in sbrugna...
EUVD-2020-2586
Malware in sbrugna...
EUVD-2018-17486
Malware in sbrugna...
EUVD-2017-8826
Malware in sbrugna...
EUVD-2020-2589
Malware in sbrugna...
EUVD-2020-29892
Malware in sbrugna...
EUVD-2023-53003
Malicious code in bioql PyPI...