1020 matches found
CVE-2023-3654 Origin Check Bypass
cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" to 03.A06rks 2023.02.37 are affected by a origin bypass via the host header in an HTTP request. This vulnerability can be triggered by an HTTP endpoint exposed to the network...
CVE-2023-3654
CVE-2023-3654 affects cashIT! devices from PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH up to version 2023.02.37. The issue is an origin bypass via the HTTP Host header, triggered by an HTTP endpoint exposed to the network. The root cause is a host-header-based origin check bypass, enabling u...
CVE-2023-3655
The CVE-2023-3655 entry concerns cashIT! - serving solutions on devices running version 03.A06rks 2023.02.37. Connected PT-2023-25621 details indicate the vulnerability allows leakage of the database (including system settings and user accounts) via an HTTP endpoint exposed to the network. No exp...
CVE-2023-3656 Unauthenticated Remote Code Execution
cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" to 03.A06rks 2023.02.37 are affected by an unauthenticated remote code execution vulnerability. This vulnerability can be triggered by an HTTP endpoint exposed to the network...
Chinese Silent Skimmer Attack Hits Businesses in APAC and NALA regions
By Deeba Ahmed They Key targets of the Silent Skimmer attack are companies creating/hosting payment infrastructure, including e-commerce platforms and POS point of sales systems providers. This is a post from HackRead.com Read the original post: Chinese Silent Skimmer Attack Hits Businesses in AP...
September 12, 2023—KB5030261 (Security-only update)
None None...
CVE-2023-36327
Integer Overflow vulnerability in RELIC before commit 421f2e91cf2ba42473d4d54daf24e295679e290e, allows attackers to execute arbitrary code and cause a denial of service in pos argument in bngetprime function...
Lack of Deadline Protection in Key Functions Poses Potential Exploits
Lines of code Vulnerability details Impact The absence of a deadline parameter in key function calls within the EvolvingProteus contract poses a significant vulnerability. Transactions that stay pending in the mempool due to outdated slippage could be executed at a much later time than initially...
August 8, 2023—KB5029296 (Monthly Rollup)
None None...
Aures Booking & POS Terminal - Local Privilege Escalation
Exploit Title: Aures Booking & POS Terminal - Local Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2323 Release Date: ============= 2023-07-17 Vulnerability Laboratory ID VL-ID: ==================================== 2323 Common...
CVE-2023-3617
A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. This affects an unknown part of the file adminclass.php of the component Login Page. The manipulation of the argument username leads to sql injection. It is possible to initiate the...
CVE-2023-3617
A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. This affects an unknown part of the file adminclass.php of the component Login Page. The manipulation of the argument username leads to sql injection. It is possible to initiate the...
Sql injection
A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. This affects an unknown part of the file adminclass.php of the component Login Page. The manipulation of the argument username leads to sql injection. It is possible to initiate the...
CVE-2023-3617 SourceCodester Best POS Management System Login Page admin_class.php sql injection
A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. This affects an unknown part of the file adminclass.php of the component Login Page. The manipulation of the argument username leads to sql injection. It is possible to initiate the...
CVE-2023-3617
CVE-2023-3617 affects SourceCodester Best POS Management System 1.0, specifically the Login Page component’s admin_class.php. Multiple sources describe a SQL injection vulnerability triggered by manipulating the username parameter, exploitable remotely, with public disclosure. Connected documents...
PT-2023-25470 · Unknown · Sourcecodester Best Pos Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Best POS Management System version 1.0 Description: A critical issue affects the Login Page component, specifically the file admin class.php. The manipulation of the username argument leads to SQL injection. This issue can be...
Qatanna POS Software 1.0 Blind SQL Injection
Exploit Title: Qatanna POS Software 1.0 - Blind SQL Injection Exploit Date: May 07, 2023. CVSS 3.1: 8.8 High CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Application Name: Qatanna POS Software Application Version: 1.0 Link: https://www.codester.com/items/42053/qatanna-pos-software...
Sales of Cashier Goods v1.0 - Cross Site Scripting (XSS)
Exploit Title: Sales of Cashier Goods v1.0 - Cross Site Scripting XSS Date: 2023-06-23 country: Iran Exploit Author: Amirhossein Bahramizadeh Category : webapps Dork : /print.php?nmmember= Vendor Homepage:...