3514 matches found
CVE-2025-10623
The CVE-2025-10623 entry concerns SourceCodester Hotel Reservation System 1.0. The vulnerable element is the deleteuser.php file, where manipulation of the ID parameter results in an SQL injection. The vulnerability is exploitable remotely and there are public PoCs. Exploitation is supported by m...
CVE-2025-10623 SourceCodester Hotel Reservation System deleteuser.php sql injection
A vulnerability was identified in SourceCodester Hotel Reservation System 1.0. The impacted element is an unknown function of the file deleteuser.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and...
CVE-2025-10621
A vulnerability was determined in SourceCodester Hotel Reservation System 1.0. The affected element is an unknown function of the file editroomimage.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...
CVE-2025-10621
A vulnerability was determined in SourceCodester Hotel Reservation System 1.0. The affected element is an unknown function of the file editroomimage.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...
CVE-2025-10621
SourceCodester Hotel Reservation System 1.0 contains a SQL injection vulnerability in editroomimage.php caused by manipulation of the ID parameter. Exploitation can be performed remotely, and publicly disclosed exploits exist. Remediation/mitigation guidance from PT-2025-38281 suggests a temporar...
CVE-2025-10621 SourceCodester Hotel Reservation System editroomimage.php sql injection
A vulnerability was determined in SourceCodester Hotel Reservation System 1.0. The affected element is an unknown function of the file editroomimage.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...
CVE-2025-10621 SourceCodester Hotel Reservation System editroomimage.php sql injection
A vulnerability was determined in SourceCodester Hotel Reservation System 1.0. The affected element is an unknown function of the file editroomimage.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...
TA558 Uses AI-Generated Scripts to Deploy Venom RAT in Brazil Hotel Attacks
The threat actor known as TA558 has been attributed to a fresh set of attacks delivering various remote access trojans RATs like Venom RAT to breach hotels in Brazil and Spanish-speaking markets. Russian cybersecurity vendor Kaspersky is tracking the activity, observed in summer 2025, to a cluste...
SourceCodester Hotel Reservation System SQL注入漏洞
SourceCodester Hotel Reservation System is a SourceCodester open source hotel reservation system. A SQL injection vulnerability exists in SourceCodester Hotel Reservation System version 1.0, which stems from incorrect manipulation of the parameter ID in the file deleteuser.php, which could lead t...
PT-2025-38281
Name of the Vulnerable Software and Affected Versions: SourceCodester Hotel Reservation System version 1.0 Description: A SQL injection issue exists in the editroomimage.php file due to manipulation of the ID argument. This can be initiated remotely. The exploit has been publicly disclosed...
SourceCodester Hotel Reservation System SQL注入漏洞
SourceCodester Hotel Reservation System is a SourceCodester open source hotel reservation system. A SQL injection vulnerability exists in SourceCodester Hotel Reservation System version 1.0, which stems from incorrect manipulation of the parameter ID in the file editroomimage.php, which could lea...
RevengeHotels: a new wave of attacks leveraging LLMs and VenomRAT
Background RevengeHotels, also known as TA558, is a threat group that has been active since 2015, stealing credit card data from hotel guests and travelers. RevengeHotels' modus operandi involves sending emails with phishing links which redirect victims to websites mimicking document storage. The...
Malicious code in hotel-lima-charlie-gwkmz (npm)
The package hotel-lima-charlie-gwkmz was found to contain malicious code...
Malicious code in hotel-sierra-charlie-agdeg (npm)
The package hotel-sierra-charlie-agdeg was found to contain malicious code...
Malicious code in hotel-november-orange-teqks (npm)
The package hotel-november-orange-teqks was found to contain malicious code...
Malicious code in oscar-hotel-date-gwstk (npm)
The package oscar-hotel-date-gwstk was found to contain malicious code...
MAL-2025-44625 Malicious code in hotel-november-orange-teqks (npm)
The package hotel-november-orange-teqks was found to contain malicious code...
Malicious code in hotel-elderberry-romeo-saxfp (npm)
The package hotel-elderberry-romeo-saxfp was found to contain malicious code...