1050 matches found
CVE-2023-24320
Technical details about CVE-2023-24320 are not publicly available in the provided documents. No concrete affected products, versions, or remediation are disclosed here. Monitor for updates from official advisories and vendors.
CVE-2023-24320
An access control issue in Axcora POS 0gitf77ec09 allows unauthenticated attackers to execute arbitrary commands via unspecified vectors...
Best POS Management System 1.0 Cross Site Scripting Vulnerability
Exploit Title: Stored Cross Site Scripting on Best pos Management System Exploit Author: Ahmed Ismail @MrOz1l Vendor Homepage: https://www.sourcecodester.com/php/16127/best-pos-management-system-php.html Software Link: https://www.sourcecodester.com/sites/default/files/download/mayurik/kruxton.zi...
Best POS Management System 1.0 Shell Upload
Exploit Title: Authenticated Remote Code Execution on File Upload Google Dork: NA Date: 17/2/2023 Exploit Author: Ahmed Ismail @MrOz1l Vendor Homepage: https://www.sourcecodester.com/php/16127/best-pos-management-system-php.html Software Link:...
Best POS Management System 1.0 Cross Site Scripting
Exploit Title: Stored Cross Site Scripting on Best pos Management System Google Dork: NA Date: 14/2/2023 Exploit Author: Ahmed Ismail @MrOz1l Vendor Homepage: https://www.sourcecodester.com/php/16127/best-pos-management-system-php.html Software Link:...
Best POS Management System 1.0 SQL Injection
Exploit Title: SQL Injection on Best pos Management System Google Dork: NA Date: 14/2/2023 Exploit Author: Ahmed Ismail @MrOz1l Vendor Homepage: https://www.sourcecodester.com/php/16127/best-pos-management-system-php.html Software Link:...
How to protect your business from supply chain attacks
Threat actors know that attacking the supply chain is not just a smart strategy but also a winning one. When American store Target found a Trojan designed to steal card details on its POS point-of-sale systems in 2013, no one expected that the route into its secure environment was its heating,...
Prilex PoS Malware Evolves to Block Contactless Payments to Steal from NFC Cards
The Brazilian threat actors behind an advanced and modular point-of-sale PoS malware known as Prilex have reared their head once again with new updates that allow it to block contactless payment transactions. Russian cybersecurity firm Kaspersky said it detected three versions of Prilex 06.03.808...
Prilex modification now targeting contactless credit card transactions
Prilex is a singular threat actor that has evolved from ATM-focused malware into unique modular PoS malware—actually, the most advanced PoS threat we have seen so far, as described in a previous article. Forget about those old memory scrapers seen in PoS attacks. Prilex goes beyond these, and it...
CVE-2022-43085
An arbitrary file upload vulnerability in addproduct.php of Restaurant POS System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-43086
Restaurant POS System v1.0 was discovered to contain a SQL injection vulnerability via updatecustomer.php...
Sql injection
Restaurant POS System v1.0 was discovered to contain a SQL injection vulnerability via updatecustomer.php...
Design/Logic Flaw
An arbitrary file upload vulnerability in addproduct.php of Restaurant POS System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-43085
An arbitrary file upload vulnerability in addproduct.php of Restaurant POS System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-43085
An arbitrary file upload vulnerability in addproduct.php of Restaurant POS System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...
Restaurant POS System 代码问题漏洞
Restaurant POS System is a full-featured Restaurant POS System based project by Martin Mbithi Nzilani Personal Developer. A security vulnerability exists in Restaurant POS System v1.0, which stems from an arbitrary file upload vulnerability contained in addproduct.php. An attacker can exploit thi...
CVE-2022-43085
CVE-2022-43085 affects Restaurant POS System v1.0, specifically the add_product.php file. The vulnerability is an arbitrary file upload that lets an attacker execute arbitrary PHP code by uploading a crafted file. According to multiple sources, this can lead to remote code execution with likely h...
CVE-2022-43086
Restaurant POS System v1.0 was discovered to contain a SQL injection vulnerability via updatecustomer.php...
PT-2022-26748 · Unknown · Restaurant Pos System
Name of the Vulnerable Software and Affected Versions: Restaurant POS System version 1.0 Description: The issue is related to a SQL injection vulnerability. It affects the update customer.php file. Recommendations: For Restaurant POS System version 1.0, consider restricting access to the update...