CVE-2025-67261

Abacre Retail Point of Sale 14.0.0.396 is vulnerable to content-based blind SQL injection. The vulnerability exists in the Search function of the Orders page...

CVE-2025-67261

Abacre Retail Point of Sale 14.0.0.396 is vulnerable to content-based blind SQL injection. The vulnerability exists in the Search function of the Orders page...

PT-2026-3640

Abacre Retail Point of Sale 14.0.0.396 is affected by a stored cross-site scripting XSS vulnerability in the Clients module. The application fails to properly sanitize user-supplied input stored in the Name and Surname fields. An attacker can insert malicious HTML or script content into these...

CVE-2025-67263: Improper Neutralization of Input During Web Page Generation

Abacre Retail Point of Sale 14.0.0.396 is affected by a stored cross-site scripting XSS vulnerability in the Clients module. The application fails to properly sanitize user-supplied input stored in the Name and Surname fields. An attacker can insert malicious HTML or script content into these...

CVE-2025-67261: Improper Neutralization of Special Elements used in an SQL Command

Abacre Retail Point of Sale 14.0.0.396 is vulnerable to content-based blind SQL injection. The vulnerability exists in the Search function of the Orders page...

PT-2026-3637

Abacre Retail Point of Sale 14.0.0.396 is vulnerable to content-based blind SQL injection. The vulnerability exists in the Search function of the Orders page...

EUVD-2019-12198

Malware in sbrugna...

EUVD-2016-0473

Malware in sbrugna...

EUVD-2017-1712

Malware in sbrugna...

CVE-2019-2558

Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications subcomponent: Infrastructure. Supported versions that are affected are 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2019-2558

Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications subcomponent: Infrastructure. Supported versions that are affected are 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2019-2558

Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications subcomponent: Infrastructure. Supported versions that are affected are 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2019-2558: Undefined Security Weakness

Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications subcomponent: Infrastructure. Supported versions that are affected are 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

PT-2019-3116

Name of the Vulnerable Software and Affected Versions Oracle Retail Point-of-Service versions 13.4, 14.0, and 14.1 Description The issue is related to insufficient access control in the Oracle Retail Point-of-Service component, allowing an unauthenticated attacker with network access via HTTP to...

CVE-2018-2862: Undefined Security Weakness

Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications subcomponent: User Interface. Supported versions that are affected are 13.3.8, 13.4.9, 14.0.4 and 14.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

PT-2018-15875

Name of the Vulnerable Software and Affected Versions Oracle Retail Point-of-Service versions 13.3.8, 13.4.9, 14.0.4, and 14.1.3 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Retail Point-of-Service, resulting in unauthorized access to...

CVE-2017-10065

Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications subcomponent: Security. Supported versions that are affected are 13.2, 13.3, 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2017-10065: Undefined Security Weakness

Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications subcomponent: Security. Supported versions that are affected are 13.2, 13.3, 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

PT-2017-11064

Name of the Vulnerable Software and Affected Versions Oracle Retail Point-of-Service versions 13.2 through 14.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Retail Point-of-Service. Successful attacks can result in unauthorized creation,...

Unspecified Vulnerability in Oracle Retail Point-of-Service Mobile POS Component

Oracle Retail Applications is a suite of retail application store solutions. An unspecified vulnerability exists in the Oracle Retail Point-of-Service component, which could be exploited by remote attackers to gain unauthorized access to and modify data, resulting in the disclosure of information...