72635 matches found
MINI-3C8W-2R4V-4QQH
Bulletin has no description...
CVE-2026-11512 itsourcecode Hospital Management System billing.php cross site scripting
A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of the file /billing.php. The manipulation of the argument patientid leads to cross site scripting. The attack can be initiated remotely. The exploit has been...
MINI-5597-W9J2-R2M5
Bulletin has no description...
MINI-M48J-XW9Q-3C76
Bulletin has no description...
MINI-63R6-7869-3PX6
Bulletin has no description...
CVE-2026-9506
creationtimestamp| type| source ---|---|--- 2026-06-08 11:30:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnrlfqxm5c2t...
CGA-5CPG-PP3G-62MH
Bulletin has no description...
CVE-2026-11497
creationtimestamp| type| source ---|---|--- 2026-06-08 11:10:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnrkaro5st2w...
unbound: Heap overflow and crash with multiple nsid, cookie, padding EDNS options
A flaw was found in Unbound, a Domain Name System DNS resolver. A remote attacker could trigger a heap overflow by sending specially crafted DNS reply packets. This occurs when Unbound attempts to encode multiple Name Server Identifier NSID or Extension Mechanisms for DNS EDNS Cookie options, or...
CVE-2026-47430
Summary The iOS implementation of cordova-plugin-inappbrowser passes the id field from a WKScriptMessage body to commandDelegate sendPluginResult:callbackId: with no format validation CDVWKInAppBrowser.m:560–574. Any web content loaded inside the InAppBrowser can fire any pending Cordova callback...
CVE-2026-11501
A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=savepatient. The manipulation of the argument ID results in sql injection. It is possible to launch the attack...
MINI-X696-JHXH-F28H
Bulletin has no description...
CVE-2026-11487
creationtimestamp| type| source ---|---|--- 2026-06-08 07:27:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnr5rzj5cm2o...
MINI-M4VX-FGW5-X393
Bulletin has no description...
MINI-4R9W-7QH8-V7GH
Bulletin has no description...
CVE-2026-11479
creationtimestamp| type| source ---|---|--- 2026-06-08 06:57:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnr45rkxf52y...
CVE-2026-3238
A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protocol handlers for certain request types did not properly validate incoming packets, allowing an unauthenticated remote attacker to trigger a NULL pointer dereference and crash the...
CVE-2026-11489
A vulnerability was found in code-projects Online Music Site 1.0. This vulnerability affects unknown code of the file /Administrator/PHP/AdminDeleteAlbum.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been made public an...