CVE-2026-109232

The Salon Booking System – Appointment Booking for Salons, Barbershops & Spas plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sln' parameter in all versions up to, and including, 10.31.9 due to insufficient input sanitization and output escaping. This makes it possible...

CVE-2026-109232

The Salon Booking System WordPress plugin (versions up to and including 10.31.9 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping within the 'sln[]' parameter. This flaw allows unauthenticated attackers to inject arbitrary...

EUVD-2026-102670

The Salon Booking System – Appointment Booking for Salons, Barbershops & Spas plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sln' parameter in all versions up to, and including, 10.31.9 due to insufficient input sanitization and output escaping. This makes it possible...

CVE-2026-109232 Salon Booking System <= 10.31.9 - Unauthenticated Stored Cross-Site Scripting via Custom Checkout Field (Html/File Type) via Public Booking AJAX

The Salon Booking System – Appointment Booking for Salons, Barbershops & Spas plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sln' parameter in all versions up to, and including, 10.31.9 due to insufficient input sanitization and output escaping. This makes it possible...

PT-2026-115451

Name of the Vulnerable Software and Affected Versions Salon Booking System – Appointment Booking for Salons, Barbershops & Spas versions prior to 10.32.0 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting XSS, a...

qgate-sln-mlrun (>=0.1.0, <=0.2.8) potentially affected by CVE-2026-10766 via mlrun (>=1.5.2, <=1.6.4)

mlrun PYPI version =1.5.2, =0.1.0, =0.2.8 Source cves: CVE-2026-10766 Source advisory: OSV:PYSEC-2026-3487...

qgate-sln-mlrun (>=0.1.0, <=0.2.8) potentially affected by CVE-2026-10766 via mlrun (>=1.5.2, <=1.6.4)

mlrun PYPI version =1.5.2, =0.1.0, =0.2.8 Source cves: CVE-2026-10766 Source advisory: OSV:GHSA-PHX2-3W66-H4PW...

qgate-sln-mlrun (>=0.1.0, <=0.2.8) potentially affected by CVE-2026-10766 via mlrun (>=1.5.2, <=1.6.4)

mlrun PYPI version =1.5.2, =0.1.0, =0.2.8 Source cves: CVE-2026-10766 Source advisory: GHSA-PHX2-3W66-H4PW...

qgate-sln-mlrun (>=0.1.0, <=0.2.8) potentially affected by unknown CVE via mlrun (>=1.5.2, <=1.6.4)

mlrun PYPI version =1.5.2, =0.1.0, =0.2.8 Source cves: unknown CVE Source advisory: SNYK:PYTHON-MLRUN-12671202...

qgate-sln-mlrun (>=0.1.0, <=0.2.8) potentially affected by unknown CVE via mlrun (>=1.5.2, <=1.6.4)

mlrun PYPI version =1.5.2, =0.1.0, =0.2.8 Source cves: unknown CVE Source advisory: SNYK:PYTHON-MLRUN-9296273...

PT-2024-24487

Name of the Vulnerable Software and Affected Versions The Salon booking system plugin for WordPress versions up to, and including, 10.2 Description The issue is related to arbitrary file uploads due to missing file type validation in the SLN Action Ajax ImportAssistants function, along with missi...

CVE-2008-1709

CVE-2008-1709 describes a buffer overflow in Microsoft Visual InterDev 6.0 (SP6) that allows user-assisted execution of arbitrary code via a Studio Solution (.SLN) file containing a long malformed Project line (Project("{}")== sequence). The connected documents corroborate the vulnerability famil...

CVE-2008-1709: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Microsoft Visual InterDev 6.0 SP6 allows user-assisted attackers to execute arbitrary code via a Studio Solution .SLN file with a long malformed Project line beginning with a 'Project"" =' sequence, probably a different vector than CVE-2008-0250...

Microsoft Visual InterDev 6.0 SP6 - .sln Local Buffer Overflow (PoC)

Microsoft Visual InterDev 6.0 SP6 - .sln Local Buffer Overflow PoC usage: exploit.py FileName import sys print "--------------------------------------------------------------------------------" print ' PoC 2 Microsoft Visual InterDev 6.0 SP6 ".sln" files Local Buffer Overflow' print " author:...

Microsoft Visual InterDev 6.0 (SP6) .sln File Local Buffer Overflow Exploit

No description provided by source. usage: exploit.py FileName import sys print "------------------------------------------------------------------------" print ' Microsoft Visual InterDev 6.0 SP6 ".sln" files Local Buffer Overflow' print " author: shinnai" print " mail: shinnaiatautisticidotorg"...

CVE-2008-0250

CVE-2008-0250: A buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted code execution via a Studio Solution (.SLN) file that contains a long Project line. The connected record confirms the affected product/version and the input vector (long Project line in SLN) as the root c...

CVE-2008-0250: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Microsoft Visual InterDev 6.0 SP6 allows user-assisted attackers to execute arbitrary code via a Studio Solution .SLN file with a long Project line...

Microsoft Visual InterDev 6.0 SP6 - .sln Local Buffer Overflow

Microsoft Visual InterDev 6.0 SP6 - .sln Local Buffer Overflow usage: exploit.py FileName import sys print "------------------------------------------------------------------------" print ' Microsoft Visual InterDev 6.0 SP6 ".sln" files Local Buffer Overflow' print " author: shinnai" print " mail...

mssln-overflow.txt

usage: exploit.py FileName import sys print "------------------------------------------------------------------------" print ' Microsoft Visual InterDev 6.0 SP6 ".sln" files Local Buffer Overflow' print " author: shinnai" print " mail: shinnaiatautisticidotorg" print " site:...

CVE-2006-1043: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Microsoft Visual Studio 6.0 and Microsoft Visual InterDev 6.0 allows user-assisted attackers to execute arbitrary code via a long DataProject field in a 1 Visual Studio Database Project File .dbp or 2 Visual Studio Solution .sln...