CVE-2026-48077

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.1.0, the GET handler at /api/tenants/id/appointments/appointmentId performs no authorization check before returning the appointment record. Any party who knows or obtains...

CVE-2025-60803

The Antabot White-Jotter project (a Vue+Spring Boot project) is vulnerable to unauthenticated remote code execution (RCE) in versions prior to commit 9bcadc . The root cause is an improper neutralization of special elements used in an OS command (OS Command Injection) located in the /api/aaa;/../...