CVE-2026-86672: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected is an unknown function of the file example.7z of the component Backup Handler. The manipulation leads to information disclosure. The attack can be initiated remotely. Th...

PT-2026-86987

A vulnerability was found in code-projects Student Crud Operation 1.0. This impacts an unknown function of the file /card activation.sql of the component Backup File Handler. The manipulation results in information disclosure. The attack can be launched remotely. The exploit has been made public...

PT-2026-88155

A vulnerability has been found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected is an unknown function of the file example.7z of the component Backup Handler. The manipulation leads to information disclosure. The attack can be initiated remotely. Th...

CVE-2026-86519: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was found in code-projects Student Crud Operation 1.0. This impacts an unknown function of the file /cardactivation.sql of the component Backup File Handler. The manipulation results in information disclosure. The attack can be launched remotely. The exploit has been made public a...

Cron Job Injection in Remote Backup

...

PT-2026-88435

Name of the Vulnerable Software and Affected Versions Okta Access Gateway affected versions not specified Description The backup restore function fails to validate the filename embedded within an encrypted backup payload. This flaw allows file contents to be written to unintended locations on the...

CVE-2026-86302

A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /HIS/his.sql of the component SQL Database Backup File Handler. Performing a manipulation results in information disclosure. Remote exploitation of th...

CVE-2026-86302

CVE-2026-86302 affects code-projects Hospital Information System 1.0 , specifically the /HIS/his.sql file handled by the SQL Database Backup File Handler component. The vulnerability allows information disclosure through a remotely accessible SQL database backup file, requiring no authentication ...

CVE-2026-86302 code-projects Hospital Information System SQL Database Backup File his.sql information disclosure

A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /HIS/his.sql of the component SQL Database Backup File Handler. Performing a manipulation results in information disclosure. Remote exploitation of th...

CVE-2026-86302 code-projects Hospital Information System SQL Database Backup File his.sql information disclosure

A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /HIS/his.sql of the component SQL Database Backup File Handler. Performing a manipulation results in information disclosure. Remote exploitation of th...

EUVD-2026-72355

A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /HIS/his.sql of the component SQL Database Backup File Handler. Performing a manipulation results in information disclosure. Remote exploitation of th...

PT-2026-86763

A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /HIS/his.sql of the component SQL Database Backup File Handler. Performing a manipulation results in information disclosure. Remote exploitation of th...

LOYTEC L-IP BACnet/IP Routers Exposure of Sensitive Information to an Unauthorized Actor (CVE-2015-7906)

LOYTEC L-IP BACnet/IP router devices allow a remote, unauthenticated attacker to download a device backup file that exposes the hash of the device's user passwords. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...

CVE-2026-86302: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /HIS/his.sql of the component SQL Database Backup File Handler. Performing a manipulation results in information disclosure. Remote exploitation of th...

CVE-2026-86217

A vulnerability was detected in code-projects Hotel and Tourism Reservation in PHP 1.0. Affected is an unknown function of the file /ht/hoteldb%201.sql of the component Database Backup Handler. The manipulation results in information disclosure. The attack may be launched remotely. The exploit is...

CVE-2026-86217 code-projects Hotel and Tourism Reservation in PHP Database Backup hotel_db%20(1).sql information disclosure

A vulnerability was detected in code-projects Hotel and Tourism Reservation in PHP 1.0. Affected is an unknown function of the file /ht/hoteldb%201.sql of the component Database Backup Handler. The manipulation results in information disclosure. The attack may be launched remotely. The exploit is...

CVE-2026-86217

CVE-2026-86217 affects code-projects Hotel and Tourism Reservation in PHP version 1.0 . The vulnerability resides in the Database Backup Handler component, specifically in the file /ht/hotel_db (1).sql , which is exposed and accessible over the network without authentication. The exposed SQL data...

EUVD-2026-72138

A vulnerability was detected in code-projects Hotel and Tourism Reservation in PHP 1.0. Affected is an unknown function of the file /ht/hoteldb%201.sql of the component Database Backup Handler. The manipulation results in information disclosure. The attack may be launched remotely. The exploit is...

CVE-2026-86217 code-projects Hotel and Tourism Reservation in PHP Database Backup hotel_db%20(1).sql information disclosure

A vulnerability was detected in code-projects Hotel and Tourism Reservation in PHP 1.0. Affected is an unknown function of the file /ht/hoteldb%201.sql of the component Database Backup Handler. The manipulation results in information disclosure. The attack may be launched remotely. The exploit is...

CVE-2026-86179

A flaw has been found in code-projects Daily Expense Manager 1.0. Affected is an unknown function of the file /Daily-Expense-Manager/expak.sql of the component Database Backup Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack remotely. The...