EUVD-2026-83795

A weakness has been identified in piskvorky gensim up to 4.4.0. The impacted element is the function Load of the file gensim/utils.py of the component Model Loader. This manipulation of the argument fname causes deserialization. It is possible to initiate the attack remotely. The exploit has been...

PT-2026-95771

Name of the Vulnerable Software and Affected Versions WP Customer Reviews versions prior to 3.7.9 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Reflected Cross-Site Scripting. This occurs via the wpcr3 fname parameter, enabling the...

PT-2026-93683

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ceph component where the ceph fname to usr function fails to account for buffers allocated in the vmalloc region. The fscrypt subsystem requires buffers to be in t...

CVE-2026-86224 SourceCodester Class and Exam Timetabling System modal_add_product.php mysqli_query sql injection

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected is the function mysqliquery of the file /admin/modaladdproduct.php. Executing a manipulation of the argument fname can lead to sql injection. The attack can be executed remotely. The exploit has been...

EUVD-2026-72173

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected is the function mysqliquery of the file /admin/modaladdproduct.php. Executing a manipulation of the argument fname can lead to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2026-86224 SourceCodester Class and Exam Timetabling System modal_add_product.php mysqli_query sql injection

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected is the function mysqliquery of the file /admin/modaladdproduct.php. Executing a manipulation of the argument fname can lead to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2026-86224

A SQL injection vulnerability in SourceCodester Class and Exam Timetabling System 1.0 affects the mysqli_query function in /admin/modal_add_product.php , where manipulation of the fname argument allows a remote, unauthenticated attacker to inject SQL. The impact is rated HIGH (7.3) under CVSS 3.1...

CVE-2026-86224: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected is the function mysqliquery of the file /admin/modaladdproduct.php. Executing a manipulation of the argument fname can lead to sql injection. The attack can be executed remotely. The exploit has been...

PT-2026-86571

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description An issue exists in the mysqli query function within the /admin/modal add product.php file. A remote attacker can perform a SQL injection by manipulating the fname variabl...

EUVD-2026-54974

A vulnerability was determined in EFM ipTIME AX8004M 15.09.0. Impacted is the function popen of the file /cgi/d.cgi of the component CGI Endpoint. This manipulation of the argument fname causes os command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and...

CVE-2026-19379

A vulnerability was determined in EFM ipTIME AX8004M 15.09.0. Impacted is the function popen of the file /cgi/d.cgi of the component CGI Endpoint. This manipulation of the argument fname causes os command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and...

PT-2026-76197

GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convert fname function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is...

CVE-2025-67407

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in updatestudent.php via parameters fname and studentclass...

CVE-2025-67407

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in updatestudent.php via parameters fname and studentclass...

CVE-2025-67407

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in updatestudent.php via parameters fname and studentclass...

CVE-2025-67407

The Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection within the update_student.php file. The vulnerability is triggered via the fname and student_class parameters. The CVSS 3.1 score is 7.3 (High) , indicating a network-accessible flaw requiring no privileges or...

CVE-2025-67404: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in savestud.php via the parameters fname, lname, and studentclass...

CVE-2025-67404

The Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection within the save_stud.php component. The root cause is the improper neutralization of special elements used in an SQL command via the fname , lname , and student_class parameters. This vulnerability allows an a...

PT-2026-65921

Name of the Vulnerable Software and Affected Versions Sourcecodester CASAP Automated Enrollment System version 1.0 Description An issue exists in the 'update student.php' endpoint where improper handling of the fname and student class parameters allows for SQL Injection. SQL Injection is a...

CVE-2025-67407: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in updatestudent.php via parameters fname and studentclass...