HotelRunner B2B 输入验证错误漏洞

HotelRunner B2B is a software tool for business management and collaboration for the hotel industry from HotelRunner Turkey. An input validation error vulnerability exists in HotelRunner B2B versions prior to 04.06.2025, which stems from a URL redirection that could lead to forced browsing...

Improper access control

Easy CMS stores the images directory under the web document root with insufficient access control and browsing enabled, which allows remote attackers to list and possibly read images that are stored in that directory...