CVE-2026-90523

A vulnerability was identified in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The affected element is an unknown function of the file travel/src/main/java/com/controller/UsersController.java of the component User Register Endpoint. Such manipulation of...

CVE-2026-90523

CVE-2026-90523 affects the jaychouchannel Tourism-Management-System GitHub project, specifically the User Register Endpoint in UsersController.java. The root cause is improper privilege management arising from manipulation of the UsersEntity argument, allowing a remote, unauthenticated attacker t...

CVE-2026-90523 jaychouchannel Tourism-Management-System User Register Endpoint UsersController.java privileges management

A vulnerability was identified in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The affected element is an unknown function of the file travel/src/main/java/com/controller/UsersController.java of the component User Register Endpoint. Such manipulation of...

EUVD-2026-77021

A vulnerability was identified in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The affected element is an unknown function of the file travel/src/main/java/com/controller/UsersController.java of the component User Register Endpoint. Such manipulation of...

PT-2026-90860

A vulnerability was identified in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The affected element is an unknown function of the file travel/src/main/java/com/controller/UsersController.java of the component User Register Endpoint. Such manipulation of...

CVE-2018-7600

CVE-2018-7600 Drupalgeddon2 漏洞利用程序 – Python3 免责声明： 本项目仅供教育和授权渗透测试使用 。 请勿 在未获得明确书面授权的系统上使用此代码。 未经授权使用是非法 的，并可能受到法律惩罚。 作者不对任何滥用此工具的行为承担任何责任。 描述 该Python3脚本利用了CVE-2018-7600 Drupalgeddon2漏洞——一个影响多个Drupal版本的严重...

PT-2012-5295 · Sockso · Sockso

Name of the Vulnerable Software and Affected Versions: Sockso versions 1.5 and earlier Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the name parameter in the "user/register" endpoint. Recommendations: For Sockso versions 1.5 and...