Hospital Management System 1.0 - SQL Injection

Hospital Management System 1.0 contains a SQL injection vulnerability via the editid parameter in /HMS/user-login.php. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...

Hospital Management System 1.0 - SQL Injection

Hospital Management System 1.0 contains a SQL injection vulnerability via the editid parameter in /HMS/admin.php. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...

Hospital Management System 1.0 - SQL Injection

Hospital Management System 1.0 contains a SQL injection vulnerability via the editid parameter in /HMS/doctor.php. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...

PIAF-HMS ec.php - SQL Injection

claudiopizzillo PIAF-HMS PBX-In-A-Flash Hotel Management System; no released versions, latest commit 389d2633441b65ced1c104212cd62be2bfca21e5 contains multiple unauthenticated SQL injection vulnerabilities. The application has no authentication mechanism and passes user-supplied HTTP parameters...

CVE-Research

Security Research & CVE Portfolio Abbos Eshmirzayev — Cyb...

CVE-2026-101103

The PEAK-System PCAN Windows drivers are vulnerable to a classic buffer overflow (CWE-120) within the diagnostic call. The root cause is a failure to validate that the caller-supplied output buffer is large enough to accommodate the output record. This vulnerability can lead to a high availabilit...

CVE-2026-101103 HMS Networks PEAK-System PCAN Windows drivers Classic Buffer Overflow

The PEAK-System PCAN diagnostic call did not validate that the caller-supplied output buffer was large enough to hold the output record...

CVE-2026-101103 HMS Networks PEAK-System PCAN Windows drivers Classic Buffer Overflow

The PEAK-System PCAN diagnostic call did not validate that the caller-supplied output buffer was large enough to hold the output record...

CVE-2026-109576 HMS Networks PEAK-System PCAN Windows drivers Out-of-bounds Write

The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list advanced its processed-bytes counter even when a record had been rejected as invalid...

CVE-2026-109576 HMS Networks PEAK-System PCAN Windows drivers Out-of-bounds Write

The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list advanced its processed-bytes counter even when a record had been rejected as invalid...

CVE-2026-109576

The PEAK-System PCAN Windows drivers are vulnerable to an Out-of-bounds Write (CWE-787) due to a logic error in the parser. While the parser correctly identifies malformed records, the loop iterating through the record list incorrectly advances the processed-bytes counter even when a record is re...

HMS Networks PEAK-System PCAN Windows drivers

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could crash the Windows kernel. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and/or...

HMS Networks PEAK-System Device Driver Setup buffer error vulnerability

Versions 5.1.2.1151 and earlier of the HMS Networks PEAK-System Device Driver, as well as PCAN Windows CAN device drivers versions 5.1.2 and earlier, contain a buffer error vulnerability. This vulnerability arises because the PCAN processing path for type 0x4030 dereferences an object pointer tha...

PT-2026-120153

🔴 Six CVEs in HMS Networks PEAK CAN drivers affect critical infrastructure PEAK-System Device Driver Setup versions =5.1.2.1151 and PCAN Windows CAN device drivers =5.1.2 contain six vulnerabilities CVE-2026-109576, CVE-2026-101103, CVE-2026-94188, CVE-2026-103672, CVE-2026-110322, CVE-2026-10596...

HMS Networks PEAK-System Device Driver Setup buffer error vulnerability

Versions 5.1.2.1151 and earlier of the HMS Networks PEAK-System Device Driver, as well as PCAN Windows CAN device drivers versions 5.1.2 and earlier, contain a buffer error vulnerability. This vulnerability arises because PCAN diagnostic calls fail to verify whether the output buffer provided by...

HMS Networks PEAK-System Device Driver Setup buffer error vulnerability

Versions 5.1.2.1151 and earlier of the HMS Networks PEAK-System Device Driver, as well as PCAN Windows CAN device drivers versions 5.1.2 and earlier, contain a buffer error vulnerability. This vulnerability arises when the parser processes malformed records; after a record is deemed invalid, the...

HMS Networks PEAK-System Device Driver Setup input validation error vulnerability

Versions 5.1.2.1151 and earlier of the HMS Networks PEAK-System Device Driver, as well as PCAN Windows CAN device drivers versions 5.1.2 and earlier, contain an input validation error vulnerability. This vulnerability arises because the PCAN parser utilizes a DLC index length table controlled by...

HMS Networks PEAK-System Device Driver Setup input validation error vulnerability

Versions 5.1.2.1151 and earlier of the HMS Networks PEAK-System Device Driver, as well as PCAN Windows CAN device drivers versions 5.1.2 and earlier, contain an input validation error vulnerability. This vulnerability arises because the driver uses the number of requests or queued records when...

Hospital Management System 1.0 - SQL Injection Detection

Hospital Management System 1.0 contains a SQL injection vulnerability via the editid parameter in /HMS/admin.php. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. !/usr/bin/e...

Hospital Management System 1.0 - SQL Injection Detection

Hospital Management System 1.0 contains a SQL injection vulnerability via the editid parameter in /HMS/user-login.php. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site...