CVE-2026-105808 SourceCodester Simple Student Information System searchresults.php clean cross site scripting

A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploi...

CVE-2026-105808 SourceCodester Simple Student Information System searchresults.php clean cross site scripting

A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploi...

CVE-2026-105808

A cross-site scripting (XSS) vulnerability exists in SourceCodester Simple Student Information System 1.0 . The flaw is located within the clean function of the searchresults.php file. An attacker can perform a remote manipulation of the searchbox argument to execute the XSS attack. The exploit h...

CVE-2026-105808: Improper Neutralization of Input During Web Page Generation

A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploi...

apartment-browser (0.0.1), arctic (>=1.81.1, <=1.82.2) +29 more potentially affected by CVE-2026-96749 via pymongo (3.11.0)

pymongo PYPI version 3.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - apartment-browser 0.0.1 - arctic =1.81.1, =1.0.0, =0.1.0, =1.1.1, =0.1.0, =0.1.5, =0.1.0a5, =0.4.0, =0.5.7 and more Source cves: CVE-2026-96749...

bolinette (>=0.12.1, <=0.14.0), clean-architecture-mongodb-adapter (0.1.3) +16 more potentially affected by CVE-2026-96749 via pymongo (3.12.1)

pymongo PYPI version 3.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - bolinette =0.12.1, =0.0.3, =1.0.38, =0.0.0, =0.2.22, =0.1.3, =1.0.0, =0.0.7, =0.3.6, =0.1.7, =1.1.1, =1.5.0 - spreg-satosa-sync 1.1.3 and more...

@cotecna/stencil-components (>=3.3.1, <=4.0.0), @happyknuckles/angular-standalone-clean-code (0.0.2) +3 more potentially affected by CVE-2026-103922 via @capacitor/android (>=7.0.1, <=7.4.4)

@capacitor/android NPM version =7.0.1, =3.3.1, =0.0.24, =1.0.1, =0.0.1, =0.0.2 Source cves: CVE-2026-103922 Source advisory: OSV:GHSA-RVM3-566M-V7FV...

Rocky Linux 9 [CIQ] Security Update: python-lxml-debugsource / python3-lxml / python3-lxml-debuginfo (crlsa-2026_66204)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202666204 advisory. lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href CVE-2026-49825 Tenable has extracted the preceding description block direct...

Important: Red Hat Security Advisory: python3.12-lxml security update

An update for python3.12-lxml is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

RHEL 9 : python3.12-lxml (RHSA-2026:74082)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:74082 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

RHEL 9 : python3.12-lxml (RHSA-2026:74081)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:74081 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

CVE-2026-98138

In the Linux kernel, the following vulnerability has been resolved: ntfs: do not mark the volume clean in syncfs when errors were recorded ntfsputsuper and the remount-read-only path both clear the dirty bit only when NVolErrorsvol is false. ntfssyncfs clears it unconditionally, so any sync on a...

PT-2026-98794

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem where the clean func state function in states.c can incorrectly downgrade a scalar zero spill to STACK ZERO. This occurs when ...

RAMP: Reversing Adversarial Perturbations to Strengthen Clean-Label Backdoor Attacks against Malware Detectors

Deep learning-based malware detectors are commonly updated by fine-tuning on newly collected samples, but this practical update pipeline also creates an attack surface for training-time backdoor attacks. In realistic crowdsourced data collection, however, strict label vetting typically restricts...

MAL-2026-17152 Malicious code in mega-clean-box (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mega-clean-box (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Rethinking Backdoor Repair Evaluation: Distinguishing Aggregate Clean Utility from Benign Performance Preservation

Backdoor repair aims to suppress malicious behavior in compromised models while preserving benign task performance. Existing studies typically evaluate these objectives using Attack Success Rate ASR and Overall Clean Accuracy, but aggregate clean accuracy can obscure substantial degradation...

WordPress Clean Login plugin < 1.19 - Unauthenticated CAPTCHA Bypass vulnerability

Unauthenticated CAPTCHA Bypass vulnerability discovered by Arthur Morgan in WordPress Plugin Clean Login versions 1.19...

CLEANSTART-2026-ZY15804 Security fix for CVE-2018-20843 applied in: expat 2.2.7-r0

Security vulnerability affects the expat package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-HE16906 Security fix for CVE-2024-25710 applied in: apache-hive 4.0.0-r1, spark-sc212-jdk17-py311 3.4.4-r0, spark-sc213-jdk17-py312 3.5.8-r0, strimzi-kafka-operator 0.47.0-r2

CVE-2024-25710 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...