CVE-2025-3139 code-projects Bus Reservation System Login Form login buffer overflow

A vulnerability was found in code-projects Bus Reservation System 1.0 and classified as critical. Affected by this issue is the function Login of the component Login Form. The manipulation of the argument Str1 leads to buffer overflow. It is possible to launch the attack on the local host. The...

CVE-2025-3139

CVE-2025-3139 affects code-projects Bus Reservation System 1.0. The Login Form’s Login function processes the Str1 argument, and manipulating Str1 leads to a buffer overflow. The issue is local to the affected system, with public disclosure of the exploit. Connected sources corroborate the same b...

PT-2025-14576 · Unknown · Code-Projects Bus Reservation System

Name of the Vulnerable Software and Affected Versions: code-projects Bus Reservation System version 1.0 Description: A critical issue was found in the Login function of the Login Form component. The manipulation of the Str1 argument leads to a buffer overflow. It is possible to launch the attack ...

The vulnerability of the RSVP protocol implementation in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause service interruptions.

The vulnerability of the RSVP protocol implementation in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Code-Projects Bus Reservation System 安全漏洞

Code-Projects Bus Reservation System is an open source bus reservation system from Code-Projects. A security vulnerability exists in Code-Projects Bus Reservation System version 1.0, which stems from an incorrect manipulation of the parameter Str1 that can lead to a buffer overflow...

CVE-2025-31811

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xtreeme Planyo online reservation system planyo-online-reservation-system allows Stored XSS.This issue affects Planyo online reservation system: from n/a through = 3.1...

CVE-2025-31811 WordPress Planyo online reservation system plugin <= 3.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xtreeme Planyo online reservation system allows Stored XSS. This issue affects Planyo online reservation system: from n/a through 3.0...

CVE-2025-31811

CVE-2025-31811 describes a Stored Cross-Site Scripting vulnerability in the Planyo online reservation system (Planyo) WordPress plugin up to version 3.0. The issue arises from improper neutralization of input during web page generation, allowing stored XSS. Affected product: Planyo online reserva...

CVE-2020-29010

CVE-2020-29010 relates to an information-disclosure vulnerability in FortiOS where remote authenticated actors could read SSL VPN event logs of users in other VDOMs by running get vpn ssl monitor. Affected FortiOS versions include 6.2.4 and earlier, and 6.0.10 and earlier. The data exposed includ...

CVE-2021-26087

The CVE-2021-26087 entry documents a stored Cross-Site Scripting (XSS) vulnerability in Fortinet FortiWLC web interfaces. Affected FortiWLC releases include 8.6.0, 8.5.3 and earlier, 8.4.8 and earlier, and 8.3.3. Root cause is improper neutralization of input during web page generation, enabling ...

PowerVR DEVMEMXINT_RESERVATION::ppsPMR Lock Failure

The array ppsPMR in DEVMEMXINTRESERVATION holds references to PMR structures using PMRRefPMR2, intending to prevent the PMRs' physical memory from being released. However, PMRs with PVRSRVMEMALLOCFLAGNOOSPAGESONALLOC which for OSMem PMRs internally translates to FLAGONDEMAND can release their...

CVE-2025-2061

A vulnerability was found in code-projects Online Ticket Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /passenger.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The...

CVE-2025-0877

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AtaksAPP Reservation Management System allows Cross-Site Scripting XSS. This issue affects Reservation Management System: before 4.2.3...

CVE-2025-2061

A vulnerability was found in code-projects Online Ticket Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /passenger.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The...

CVE-2025-2061 code-projects Online Ticket Reservation System passenger.php cross site scripting

A vulnerability was found in code-projects Online Ticket Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /passenger.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The...

CVE-2025-2061 code-projects Online Ticket Reservation System passenger.php cross site scripting

A vulnerability was found in code-projects Online Ticket Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /passenger.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The...

CVE-2025-2061

The CVE-2025-2061 entry concerns code-projects Online Ticket Reservation System 1.0. The vulnerability is in /passenger.php where manipulation of a request parameter name enables cross-site scripting (XSS). Exploitation is remote and the exploit has been disclosed publicly. No remediation details...

Code-Projects Online Ticket Reservation System 代码注入漏洞

Code-Projects Online Ticket Reservation System is a Code-Projects open source online ticket reservation system. Code-Projects Online Ticket Reservation System version 1.0 suffers from a code injection vulnerability that stems from improper manipulation of the name parameter, which could lead to a...

CVE-2025-0877

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AtaksAPP Reservation Management System allows Cross-Site Scripting XSS. This issue affects Reservation Management System: before 4.2.3...

CVE-2025-0877

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AtaksAPP Reservation Management System allows Cross-Site Scripting XSS. This issue affects Reservation Management System: before 4.2.3...