CVE-2026-48077

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.1.0, the GET handler at /api/tenants/id/appointments/appointmentId performs no authorization check before returning the appointment record. Any party who knows or obtains...

CVE-2025-60803

The Antabot White-Jotter project (a front-end and back-end separation project using Vue+Spring Boot ) contains an unauthenticated remote code execution (RCE) vulnerability in versions up to commit 9bcadc . The flaw originates in the /api/aaa;/../register component, allowing an attacker to execute...