CVE-2026-3576

CVE-2026-3576 - WordPress 플러그인 Planyo Online Reservation System -f --disable-check python exploit.py http://127.0.0.1/wordpress/ -f /etc/passwd 예시 └─$ python exploit.py http://127.0.0.1/wordpress/ -f /etc/passwd Checking if target is vulnerable... + Version found: 2.9 + Target is vulnerable...

CVE-2026-105995

The Booking Package WordPress plugin before 1.7.30 does not perform authorization checks before returning stored reservation data, allowing unauthenticated users to disclose other customers' personal information and booking cancellation tokens...

EUVD-2026-96125

The Booking Package WordPress plugin before 1.7.30 does not perform authorization checks before returning stored reservation data, allowing unauthenticated users to disclose other customers' personal information and booking cancellation tokens...

PHPJabbers Bus Reservation System 1.1 - Cross-Site Scripting

A vulnerability was found in PHP Jabbers Bus Reservation System 1.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument index/pickupid leads to cross site scripting. The attack may be launched remotely. id:...

Sourcecodester Online Event Booking and Reservation System 2.3.0 - Cross-Site Scripting

Sourcecodester Online Event Booking and Reservation System 2.3.0 contains a cross-site scripting vulnerability in PHP/MySQL via the msg parameter to /event-management/index.php. An attacker can leverage this vulnerability in order to change the visibility of the website. Once the target user clic...

Joomla! Component Preventive And Reservation 1.0.5 - Local File Inclusion

A directory traversal vulnerability in the Preventive & Reservation compreventive component 1.0.5 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1475 info: name: Joomla...

Online Event Booking and Reservation System 2.3.0 - SQL Injection

Online Event Booking and Reservation System 2.3.0 contains a SQL injection vulnerability in event-management/views. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...

CVE-2026-106437

A flaw was found in mongo-c-driver. An attacker who can influence the buffer length supplied by an embedding application can trigger an integer underflow by passing an undersized value to the Binary JSON BSON buffer-reservation function. This issue leads to out-of-bounds memory reads and writes...

CVE-2025-7840

CVE-2025-7840 XSS 익스플로잇 저자 : Byte Reaper @ByteReaper0 설명 CVE-2025-7840 에 대한 개념 증명 익스플로잇입니다. 취약한 웹 애플리케이션 엔드포인트 중 예약 양식의 Firstname 매개변수에서 사용자 입력을 적절히 검사하지 않는 문제를 대상으로 합니다. 다음과 같은 GET 요청을 구성하면: /index.php?page=reserve&Firstname=&Lastname=test 공격자가 응답이 렌더링될 때 피해자의 브라우저에서 임의의 JavaScript를 삽입하고 실행할 수...

CVE-2026-106437

The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an...

EUVD-2026-95153

The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an...

CVE-2026-106437

The MongoDB C Driver contains an out-of-bounds read and write vulnerability within its BSON buffer-reservation API. The root cause is an integer underflow (CWE-191) that occurs when the API records a length smaller than the five-byte BSON minimum. Subsequent append or comparison operations can tr...

CVE-2026-106437 Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C Driver

The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an...

PT-2026-108140

Name of the Vulnerable Software and Affected Versions MongoDB C Driver affected versions not specified Description The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. This allows subsequent append or comparison operations to underfl...

CVE-2026-17538

The LatePoint - Appointment Booking & Reservation plugin for WordPress (versions

PT-2026-107719

The LatePoint - Appointment Booking & Reservation plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.6.9. This is due to the process step customer function using is user logged in as the sole gate before merging POSTed customer data into an...

SUSE SLES15 Security Update : kubevirt-1.6 (SUSE-SU-2026:4441-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4441-1 advisory. - Package the persistent-reservation helper's entrypoint script bsc1276520: virt-operator runs the pr-helper container with the command...

PT-2026-106608

In the Linux kernel, the following vulnerability has been resolved: btrfs: handle lack of space when cleaning up verity items When enable verity hits the qgroup limit, rollback verity needs its own metadata reservation. When the qgroup limit or lack of space refuses the rollback, the whole...

CVE-2026-14762-PoC-Exploit

CVE-2026-14762 – Code‑Projects 호텔 및 관광 예약 1.0 SQL 인젝션 익스플로잇 -orange -red 완전한 기능의 멀티스레드 시간 기반 블라인드 SQL 인젝션 익스플로잇 CVE-2026-14762. Code‑Projects 호텔 및 관광 예약 애플리케이션버전 1.0의 /admin/rooms.php 엔드포인트를 대상으로 합니다. 전체 데이터베이스 열거, 파일 시스템 읽기LOADFILE, 임의 파일 쓰기INTO OUTFILE / DUMPFILE를 수행하여 웹셸 배포를 통한 원격 코드 실행으로 이어집니...

CVE-2026-10288-AUTH-BYPASS

Hotel and Tourism Reservation System - 인증 우회 취약점 세부 정보 필드| 세부 정보 ---|--- 제목| Hotel and Tourism Reservation System - 인증 우회 공급업체| code-projects.org 제품| Hotel and Tourism Reservation System 버전| 1.0 취약점 유형| 부적절한 인증 Improper Authentication CWE| CWE-287 CVSS 점수| 9.0 치명적 CVSS 벡터|...