MAL-2026-15521 Malicious code in search-reservation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76642f0709b362fd800a9842b53bdb8f26413b9acf26562c4a5737c7bae3e856 package.json declares a dependency whose key equals the package's own name search-reservation and whose value is the bare URL...

CVE-2026-61946-Easy-Appointments-IDOR

CVE-2026-61946: Da un ID Appuntamento alla Prenotazione di Qualcun Altro Ho trovato un riferimento diretto a oggetti insicuro IDOR, sfruttabile senza autenticazione, nel plugin WordPress Easy Appointments. L'endpoint pubblico di prenotazione accettava un id dalla query string e passava i dati...

CVE-2026-3576

CVE-2026-3576 - Plugin Wordpress Planyo Online Reservation System = 3.0 - Lettura arbitraria di file tramite SSRF Questa repository contiene un exploit Proof of Concept PoC per CVE-2026-3576 Disclaimer Questo progetto è fornito esclusivamente a scopo educativo e per test di sicurezza autorizzati...

CVE-2024-10410

Código fonte Online Hotel Reservation System em PHP/MySQLi com Código Fonte | SourceCodester Descrição Uma vulnerabilidade de alto risco foi encontrada no Online Hotel Reservation System, afetando a função de upload do arquivo /marimar/admin/modroom/controller.php. A operação de bypass na detecçã...

CVE-2026-80691

CVE-2026-80691 affects the Linux kernel SCSI target iblock subsystem. In the iblock_execute_pr_out() function, the PRO_PREEMPT, PRO_PREEMPT_AND_ABORT, and PRO_RELEASE operations perform callback capability checks through ops->pr_clear. The faulty error check allows unimplemented hooks to pass ...

Online Event Booking and Reservation System 2.3.0 - SQL Injection

Online Event Booking and Reservation System 2.3.0 contains a SQL injection vulnerability in event-management/views. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...

Joomla! Component Preventive And Reservation 1.0.5 - Local File Inclusion

A directory traversal vulnerability in the Preventive & Reservation compreventive component 1.0.5 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1475 info: name: Joomla...

Sourcecodester Online Event Booking and Reservation System 2.3.0 - Cross-Site Scripting

Sourcecodester Online Event Booking and Reservation System 2.3.0 contains a cross-site scripting vulnerability in PHP/MySQL via the msg parameter to /event-management/index.php. An attacker can leverage this vulnerability in order to change the visibility of the website. Once the target user clic...

PHPJabbers Bus Reservation System 1.1 - Cross-Site Scripting

A vulnerability was found in PHP Jabbers Bus Reservation System 1.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument index/pickupid leads to cross site scripting. The attack may be launched remotely. id:...

CVE-2021-41511

CVE-2021-41511 Exploit-Titel: Lodging Reservation Management System 1.0 - SQL-Injection / Authentifizierungs-Bypass Exploit-Autor: Nitin Sharmavidvansh Hersteller-Website: https://www.sourcecodester.com/php/14883/lodging-reservation-management-system-php-free-source-code.html Software-Link:...

CVE-2026-14762-PoC-Exploit

CVE-2026-14762 – Exploit di SQL injection per Code‑Projects Hotel & Tourism Reservation 1.0 -orange -red Exploit di SQL injection blind time‑based, multi‑thread e completo per CVE‑2026‑14762. Prende di mira l'endpoint /admin/rooms.php dell'applicazione Code‑Projects Hotel & Tourism Reservation...

CVE-2026-81706

creationtimestamp| type| source ---|---|--- 2026-08-27 18:09:58+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu3gza2b7k2t 2026-08-27 19:24:01+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117169103851890443 2026-08-28 10:20:06+00:00| seen|...

CVE-2026-10290-SQLI

Hotel and Tourism Reservation System - tour.php में बिना प्रमाणीकरण के SQL Injection भेद्यता विवरण...

CVE-2026-10288-AUTH-BYPASS

होटल और पर्यटन आरक्षण प्रणाली - प्रमाणीकरण बाईपास भेद्यता विवरण...

CVE-2026-14550

The WPCafe WordPress plugin before 3.0.18 does not perform an authorization check when creating a reservation through its REST API, verifying only a publicly available nonce, allowing unauthenticated users to submit reservations with an arbitrary approval status and bypass the administrator...

CVE-2026-14550

WPCafe WordPress plugin versions before 3.0.18 fail to perform an authorization check when creating a reservation via its REST API, validating only a publicly available nonce . This allows unauthenticated users to submit reservations with an arbitrary approval status, effectively bypassing the ad...

WordPress WPCafe plugin < 3.0.18 - Unauthenticated Reservation Approval Bypass vulnerability

Unauthenticated Reservation Approval Bypass vulnerability discovered by ABIODUN VICTOR TAIWO in WordPress Plugin WPCafe versions 3.0.18...

EUVD-2026-66270

The WPCafe WordPress plugin before 3.0.18 does not perform an authorization check when creating a reservation through its REST API, verifying only a publicly available nonce, allowing unauthenticated users to submit reservations with an arbitrary approval status and bypass the administrator...

CVE-2026-14550 WPCafe < 3.0.18 - Unauthenticated Reservation Approval Bypass via Missing Authorization

The WPCafe WordPress plugin before 3.0.18 does not perform an authorization check when creating a reservation through its REST API, verifying only a publicly available nonce, allowing unauthenticated users to submit reservations with an arbitrary approval status and bypass the administrator...

CVE-2025-7840

Exploit XSS per CVE-2025-7840 Autore : Byte Reaper @ByteReaper0 Descrizione Exploit proof‑of‑concept per CVE-2025-7840 , che prende di mira un endpoint di un'applicazione web vulnerabile che non sanifica l'input utente sul parametro Firstname di un modulo di prenotazione. Creando una richiesta GE...