Lucene search
+L

337 matches found

Kitploit
Kitploit
•added 2026/09/21 6:15 p.m.•10 views

CVE-2026-14762-PoC-Exploit

CVE-2026-14762 – Code‑Projects Hotel & Tourism Reservation 1.0 SQL 注入漏洞利用工具 -orange -red 功能完备、多线程、基于时间盲注的 SQL 注入漏洞利用工具,针对 CVE‑2026‑14762。 目标为 Code‑Projects Hotel & Tourism Reservation 应用(版本 1.0)的 /admin/rooms.php 端点。 可实现完整的数据库枚举、文件系统读取(LOADFILE)和任意文件写入(INTO OUTFILE / DUMPFILE)——最终通过部署 WebShell...

7.5CVSS7.7AI score0.00431EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/19 11:32 p.m.•13 views

CVE-2026-10290-SQLI

Hotel and Tourism Reservation System - Unauthenticated SQL Injection in tour.php Vulnerability Details...

7.5CVSS7.6AI score0.00318EPSS
SaveExploits0
NVD
NVD
•added 2026/09/13 2:16 p.m.•15 views

CVE-2026-90524

A security flaw has been discovered in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The impacted element is an unknown function of the component Update Endpoint. Performing a manipulation results in missing authentication. The attack may be initiated...

7.5CVSS0.00693EPSS
SaveExploits0References7
NVD
NVD
•added 2026/09/13 2:16 p.m.•17 views

CVE-2026-90523

A vulnerability was identified in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The affected element is an unknown function of the file travel/src/main/java/com/controller/UsersController.java of the component User Register Endpoint. Such manipulation of...

7.5CVSS0.005EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/09/13 1:30 p.m.•47 views

CVE-2026-90524 jaychouchannel Tourism-Management-System Update Endpoint missing authentication

A security flaw has been discovered in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The impacted element is an unknown function of the component Update Endpoint. Performing a manipulation results in missing authentication. The attack may be initiated...

7.5CVSS0.00693EPSS
SaveExploits0References7
CVE
CVE
•added 2026/09/13 1:30 p.m.•31 views

CVE-2026-90524

jaychouchannel Tourism-Management-System contains a missing authentication flaw in the Update Endpoint component, allowing a remote unauthenticated attacker to manipulate an unknown function. The flaw was tracked in GitHub issue #11 and patched in commit 84d8ec3 . A proof-of-concept exploit has b...

7.5CVSS6.6AI score0.00693EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/09/13 1:30 p.m.•11 views

EUVD-2026-77022

A security flaw has been discovered in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The impacted element is an unknown function of the component Update Endpoint. Performing a manipulation results in missing authentication. The attack may be initiated...

7.5CVSS6.6AI score0.00693EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/09/13 1:30 p.m.•5 views

CVE-2026-90524 jaychouchannel Tourism-Management-System Update Endpoint missing authentication

A security flaw has been discovered in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The impacted element is an unknown function of the component Update Endpoint. Performing a manipulation results in missing authentication. The attack may be initiated...

7.5CVSS6.6AI score0.00693EPSS
SaveExploits0References7
NVD
NVD
•added 2026/09/13 1:16 p.m.•14 views

CVE-2026-90522

A vulnerability was determined in jaychouchannel Tourism-Management-System up to d984d172dceca907f8b447efbdb06dc233f7938d. Impacted is the function resetPass of the file UsersController.java of the component Password Recovery. This manipulation causes weak password recovery. The attack can be...

7.5CVSS0.005EPSS
SaveExploits0References7
NVD
NVD
•added 2026/09/13 1:16 p.m.•16 views

CVE-2026-90520

A vulnerability has been found in jaychouchannel Tourism-Management-System up to 84d8ec384f669df3985293dab293bb7b477efa64. This vulnerability affects unknown code of the file AuthorizationInterceptor.java of the component Authorization Interceptor. The manipulation leads to improper authorization...

6.5CVSS0.00366EPSS
SaveExploits0References7
NVD
NVD
•added 2026/09/13 1:16 p.m.•10 views

CVE-2026-90521

A vulnerability was found in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. This issue affects some unknown processing of the file MenpiaodingdanController.java of the component CRUD. The manipulation of the argument ID results in authorization bypass. It...

6.5CVSS0.00393EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2026/09/13 1:15 p.m.•5 views

CVE-2026-90523 jaychouchannel Tourism-Management-System User Register Endpoint UsersController.java privileges management

A vulnerability was identified in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The affected element is an unknown function of the file travel/src/main/java/com/controller/UsersController.java of the component User Register Endpoint. Such manipulation of...

7.5CVSS6.7AI score0.005EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/09/13 1:15 p.m.•42 views

CVE-2026-90523 jaychouchannel Tourism-Management-System User Register Endpoint UsersController.java privileges management

A vulnerability was identified in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The affected element is an unknown function of the file travel/src/main/java/com/controller/UsersController.java of the component User Register Endpoint. Such manipulation of...

7.5CVSS0.005EPSS
SaveExploits0References7
CVE
CVE
•added 2026/09/13 1:15 p.m.•25 views

CVE-2026-90523

CVE-2026-90523 affects the jaychouchannel Tourism-Management-System GitHub project, specifically the User Register Endpoint in UsersController.java. The root cause is improper privilege management arising from manipulation of the UsersEntity argument, allowing a remote, unauthenticated attacker t...

7.5CVSS6.7AI score0.005EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/09/13 1:15 p.m.•12 views

EUVD-2026-77021

A vulnerability was identified in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The affected element is an unknown function of the file travel/src/main/java/com/controller/UsersController.java of the component User Register Endpoint. Such manipulation of...

7.5CVSS6.7AI score0.005EPSS
SaveExploits0References7
CVE
CVE
•added 2026/09/13 1:00 p.m.•19 views

CVE-2026-90522

CVE-2026-90522 affects the jaychouchannel Tourism-Management-System (up to commit d984d172). The vulnerability resides in the resetPass function of UsersControllers.java within the Password Recovery component, resulting in a weak password recovery mechanism. The flaw is remotely exploitable with ...

7.5CVSS6.5AI score0.005EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/09/13 1:00 p.m.•39 views

CVE-2026-90522 jaychouchannel Tourism-Management-System Password Recovery UsersController.java resetPass password recovery

A vulnerability was determined in jaychouchannel Tourism-Management-System up to d984d172dceca907f8b447efbdb06dc233f7938d. Impacted is the function resetPass of the file UsersController.java of the component Password Recovery. This manipulation causes weak password recovery. The attack can be...

7.5CVSS0.005EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/09/13 1:00 p.m.•4 views

CVE-2026-90522 jaychouchannel Tourism-Management-System Password Recovery UsersController.java resetPass password recovery

A vulnerability was determined in jaychouchannel Tourism-Management-System up to d984d172dceca907f8b447efbdb06dc233f7938d. Impacted is the function resetPass of the file UsersController.java of the component Password Recovery. This manipulation causes weak password recovery. The attack can be...

7.5CVSS6.5AI score0.005EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/09/13 1:00 p.m.•13 views

EUVD-2026-77020

A vulnerability was determined in jaychouchannel Tourism-Management-System up to d984d172dceca907f8b447efbdb06dc233f7938d. Impacted is the function resetPass of the file UsersController.java of the component Password Recovery. This manipulation causes weak password recovery. The attack can be...

7.5CVSS6.5AI score0.005EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/09/13 12:45 p.m.•7 views

CVE-2026-90521 jaychouchannel Tourism-Management-System CRUD MenpiaodingdanController.java authorization

A vulnerability was found in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. This issue affects some unknown processing of the file MenpiaodingdanController.java of the component CRUD. The manipulation of the argument ID results in authorization bypass. It...

6.5CVSS6AI score0.00393EPSS
SaveExploits0References8
Rows per page
Query Builder