WordPress Supreme Modules Lite plugin <= 2.5.63 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Supreme Modules Lite versions = 2.5.63...

CVE-2026-103113

A vulnerability was determined in OS4ED openSIS-Classic up to 9.3. The affected element is the function save action of the file modules/students/Student.php of the component General Information Tab. Executing a manipulation of the argument students can lead to sql injection. The attack may be...

EUVD-2026-89762

A vulnerability was determined in OS4ED openSIS-Classic up to 9.3. The affected element is the function save action of the file modules/students/Student.php of the component General Information Tab. Executing a manipulation of the argument students can lead to sql injection. The attack may be...

CVE-2026-103113 OS4ED openSIS-Classic General Information Tab Student.php save action sql injection

A vulnerability was determined in OS4ED openSIS-Classic up to 9.3. The affected element is the function save action of the file modules/students/Student.php of the component General Information Tab. Executing a manipulation of the argument students can lead to sql injection. The attack may be...

CVE-2026-103113

The OS4ED openSIS-Classic software (up to version 9.3 ) is vulnerable to SQL injection in the General Information Tab component. The flaw exists within the save action function of the modules/students/Student.php file. An attacker can exploit this by manipulating the students argument, which may ...

@queenanya/invite (>=1.0.0, <=5.0.0), @queenanya/modules (>=5.0.1-0, <=6.1.0) potentially affected by unknown CVE via @queenanya/baileys (9.10.1)

@queenanya/baileys NPM version 9.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on @queenanya/baileys and may be impacted: - @queenanya/invite =1.0.0, =5.0.1-0, =6.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2026-17373...

@queenanya/invite (>=1.0.0, <=5.0.0), @queenanya/modules (>=5.0.1-0, <=6.1.0) potentially affected by unknown CVE via @queenanya/baileys (9.10.1)

@queenanya/baileys NPM version 9.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on @queenanya/baileys and may be impacted: - @queenanya/invite =1.0.0, =5.0.1-0, =6.1.0 Source cves: unknown CVE Source advisory: SNYK:JS-QUEENANYABAILEYS-20336218...

CVE-2026-102844

A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This vulnerability affects the function detail of the file application/modules/admin/controllers/laporandatapasien.php. Executing a manipulation of the argument idparam can lead to...

PT-2026-103116

A vulnerability was determined in OS4ED openSIS-Classic up to 9.3. The affected element is the function save action of the file modules/students/Student.php of the component General Information Tab. Executing a manipulation of the argument students can lead to sql injection. The attack may be...

PT-2026-114169

Name of the Vulnerable Software and Affected Versions GitPython versions prior to 3.2.0 Description An information disclosure issue exists where malicious repositories can trigger the expansion of environment variables. This occurs within the Repo. clone function when using separate git dir, as i...

CVE-2026-103113: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in OS4ED openSIS-Classic up to 9.3. The affected element is the function save action of the file modules/students/Student.php of the component General Information Tab. Executing a manipulation of the argument students can lead to sql injection. The attack may be...

PT-2026-103139

Author Cross Site Scripting XSS in Supreme Modules Lite = 2.5.63 versions...

CVE-2026-102384: Improper Neutralization of Input During Web Page Generation

Author Cross Site Scripting XSS in Supreme Modules Lite = 2.5.63 versions...

PT-2026-103118

A vulnerability was identified in OS4ED openSIS-Classic up to 9.3. The impacted element is the function DBQuery assignment of the file modules/grades/Assignments.php of the component Assignment Management Endpoint. The manipulation of the argument Tables leads to sql injection. It is possible to...

SUSE SLED15 / SLES15 Security Update : perl-DBI (SUSE-SU-2026:4386-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4386-1 advisory. This update for perl-DBI fixes the following issue: - CVE-2026-78030: arbitrary modules loaded due to unvalidated dbmty...

SUSE SLES16 Security Update : perl-DBI (SUSE-SU-2026:23919-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:23919-1 advisory. This update for perl-DBI fixes the following issue: - CVE-2026-78030: arbitrary modules loaded due to unvalidated dbmtype and dbmmldbm...

CentOS Linux 8 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-filesystem / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1778142227)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1778142227 advisory. - A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS...

Security update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformat-xml, jackson-dataformats-binary, jackson-modules-base

This update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformat-xml, jackson-dataformats-binary, jackson-modules-base fixes the following issues: CVE-2026-18401: Number Length Constraint Bypass in Async Parser Can Lead to Potential Processing Time Issues...

SUSE-SU-2026:4394-1 Security update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformat-xml, jackson-dataformats-binary, jackson-modules-base

This update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformat-xml, jackson-dataformats-binary, jackson-modules-base fixes the following issues: - CVE-2026-18401: Number Length Constraint Bypass in Async Parser Can Lead to Potential Processing Time Issues...

Security update for perl-DBI

This update for perl-DBI fixes the following issue: CVE-2026-78030: arbitrary modules loaded due to unvalidated dbmtype and dbmmldbm attributes in DBD::DBM bsc1281704. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...