CVE-2019-15819

The nd-restaurant-reservations plugin before 1.5 for WordPress has no requirement for ndrstimportsettingsphpfunction authentication...

Authentication flaw

The nd-restaurant-reservations plugin before 1.5 for WordPress has no requirement for ndrstimportsettingsphpfunction authentication...

CVE-2019-15819

The CVE-2019-15819 affects the WordPress plugin nd-restaurant-reservations, version prior to 1.5. The root cause is missing authentication for the nd_rst_import_settings_php_function, enabling unauthorized configuration changes. Public records indicate potential impact such as modification of log...

WordPress Restaurant Reservations plugin <= 1.3 - Unauthenticated Options Change vulnerability

Unauthenticated Options Change vulnerability found by Jerome Bruandet Nintechnet in WordPress Restaurant Reservations plugin versions = 1.3. Solution Update the WordPress Restaurant Reservations plugin to the latest available version at least 1.5...

ND Restaurant Reservations <= 1.3 - Unauthenticated Options Change

The Restaurant Reservations WordPress plugin was affected by an Unauthenticated Options Change security vulnerability...

Joomla JMultipleHotelReservation 6.0.7 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component J-MultipleHotelReservation 6.0.7 - SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: http://cmsjunkie.com/ Software Link:...

Marriott breach impacts 500 million customers: here’s what to do about it

Today Marriott disclosed a large-scale data breach impacting up to 500 million customers who have stayed at a Starwood-branded hotel within the last four years. While details of the breach are still sparse, Marriott stated that there was unauthorized access to a database tied to customer...

Marriott: Data on 500 Million Guests Stolen in 4-Year Breach

Hospitality giant Marriott today disclosed a massive data breach exposing the personal and financial information on as many as a half billion customers who made reservations at any of its Starwood properties over the past four years. Marriott said the breach involved unauthorized access to a...

moonlightmotelanaheim.com XSS vulnerability

Open Bug Bounty ID: OBB-674320 Description| Value ---|--- Affected Website:| moonlightmotelanaheim.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

reservations.travelclick.com XSS vulnerability

Open Bug Bounty ID: OBB-663988 Description| Value ---|--- Affected Website:| reservations.travelclick.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

prefecturahr.ro Improper Access Control vulnerability

Open Bug Bounty ID: OBB-656549 Description| Value ---|--- Affected Website:| prefecturahr.ro Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

reservations.clubsolaris.com XSS vulnerability

Open Bug Bounty ID: OBB-655583 Description| Value ---|--- Affected Website:| reservations.clubsolaris.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

southerncomfortbandb.com XSS vulnerability

Open Bug Bounty ID: OBB-629466 Description| Value ---|--- Affected Website:| southerncomfortbandb.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

le-fruitdelapassion.com XSS vulnerability

Open Bug Bounty ID: OBB-625129 Description| Value ---|--- Affected Website:| le-fruitdelapassion.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-14778

CVE-2017-14778 is rejected/not used; reference CVE-2018-7502 instead.

Yelp: CRITICAL-CLICKJACKING at Yelp Reservations Resulting in exposure of victim Private Data (Email info) + Victim Credit Card MissUse.

Please have a look at this interesting article with precise explanation about Click-jacking security flaw: https://www.linkedin.com/pulse/20141202104842-120953718-why-am-i-anxious-about-clickjacking/ In Yelp platform the response headers of the Reservation page does not contain the X-Frame-Option...

NetScaler SD-WAN Best Practices

Purpose and Scope The intention of this article is to provide the best practices when NetScaler SD-WAN solution is designed, planned, and executed in the your network. Network Infrastructure Design and Configuration Verifying ISP Link Health For new deployments, prior to SD-WAN deployment and/or...

rentacarazorestravel.com XSS vulnerability

Open Bug Bounty ID: OBB-574500 Description| Value ---|--- Affected Website:| rentacarazorestravel.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

reservations.travelclick.com XSS vulnerability

Open Bug Bounty ID: OBB-570456 Description| Value ---|--- Affected Website:| reservations.travelclick.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

reservations-page.com XSS vulnerability

Open Bug Bounty ID: OBB-566589 Description| Value ---|--- Affected Website:| reservations-page.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...