POS vulnerability