PT-2025-38675 · Lioncoders · Salepro Pos

Jaredloo · Published 2025-09-22 · Updated 2025-09-22 · CVE-2025-10776

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions LionCoders SalePro POS versions prior to 5.5.1

Description A security issue exists in LionCoders SalePro POS that involves the cleartext transmission of sensitive information during some unknown processing related to the Login component. This issue can be exploited remotely and is considered to have high complexity with difficult exploitability. The exploit is publicly available. The vendor was contacted regarding this disclosure but did not respond.

Recommendations Update LionCoders SalePro POS to version 5.5.1 or later.

Exploit

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-310

CWE-319

Related Identifiers

CVE-2025-10776

Affected Products

Salepro Pos

References · 8

• 🔥 https://github.com/PlsRevert/CVEs/issues/1#issue-3398101584 · Exploit
• 🔥 https://github.com/PlsRevert/CVEs/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-10776 · Security Note
• https://vuldb.com/?ctiid.325132 · Note
• https://twitter.com/CVEnew/status/1969956785554428301 · Twitter Post
• https://vuldb.com/?submit.650795 · Note
• https://vuldb.com/?id.325132 · Note
• https://t.me/CVEtracker/33018 · Telegram Post