Vulnerabilities in TripSpark software