CVE-2026-107081: Undefined Security Weakness

SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints admin/AJAXlookuphandler.php, admin/AJAXcheckid.php, admin/AJAXvocabolarycontrol.php in SENAYAN Library Management System SLiMS Bulian 9.8.0 allows any authenticated staff user to extrac...

CVE-2026-107083

SENAYAN Library Management System SLiMS Bulian slims9bulian 9.8.0 is vulnerable to SQL Injection in admin/modules/reporting/customs/dldetail.php via the parameter fileID...

CVE-2026-107083: Improper Neutralization of Special Elements used in an SQL Command

SENAYAN Library Management System SLiMS Bulian slims9bulian 9.8.0 is vulnerable to SQL Injection in admin/modules/reporting/customs/dldetail.php via the parameter fileID...

CVE-2026-111046: Missing Authorization

FOSSBilling is an open source billing and client-management platform. From 0.8.4 until 0.8.6, hasManagePermission fails open for inactive non-core modules because its early return on !isExtensionActive skips the module-access and managesettings checks. A low-privileged staff account with...

CVE-2026-107082

Slims Senayan Library Management Systems 9 Bulian 9.8.0 allows an authenticated staff user to perform SQL injection via the opachide and promoted GET parameters of admin/modules/bibliography/index.php, because escapestring is applied but the values are concatenated into an unquoted numeric SQL...

CVE-2026-107081

SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints admin/AJAXlookuphandler.php, admin/AJAXcheckid.php, admin/AJAXvocabolarycontrol.php in SENAYAN Library Management System SLiMS Bulian 9.8.0 allows any authenticated staff user to extrac...

PT-2026-117452

SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints admin/AJAX lookup handler.php, admin/AJAX check id.php, admin/AJAX vocabolary control.php in SENAYAN Library Management System SLiMS Bulian 9.8.0 allows any authenticated staff user to...

CVE-2026-107083

The SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL Injection (CWE-89) due to improper neutralization of special elements in unquoted numeric contexts. The vulnerability exists in two admin modules: admin/modules/serial_control/subscription.php (via ite...

CVE-2026-107082

SLiMS (Senayan Library Management Systems) 9 Bulian 9.8.0 is vulnerable to SQL injection via the opac_hide and promoted GET parameters in admin/modules/bibliography/index.php. The root cause is that while escape_string() is applied, values are concatenated into an unquoted numeric SQL context , a...

EUVD-2026-104452

SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints admin/AJAXlookuphandler.php, admin/AJAXcheckid.php, admin/AJAXvocabolarycontrol.php in SENAYAN Library Management System SLiMS Bulian 9.8.0 allows any authenticated staff user to extrac...

PT-2026-117478

Name of the Vulnerable Software and Affected Versions SENAYAN Library Management System SLiMS Bulian version 9.8.0 Description An issue exists that allows SQL Injection, a technique where malicious SQL statements are inserted into entry fields for execution. This occurs at the...

DotCMS-CVE-2022-45782

CVE-2022-45782 – dotCMS Password Reset Token Predictability PoC This repository contains a proof-of-concept exploit for CVE-2022-45782, a vulnerability in dotCMS where password-reset tokens are generated using the non-cryptographic method RandomStringUtils.randomAlphanumeric. Because this token i...

cve-2025-4615

CVE-2025-4615 — Technical Analysis & Proof of Concept Vulnerability: Improper Neutralization of Input in PAN-OS Management Web Interface Vendor Advisory: https://security.paloaltonetworks.com/CVE-2025-4615 CVSS 4.0: 6.9 MEDIUM — Integrity HIGH, Availability HIGH CWE: CWE-83 Improper Neutralizatio...

CVE-2026-111990

A weakness has been identified in kishan0725 Hospital Management System up to 777fda46b77a820977a5ba616283dbfbc40bf7e1. This affects the function mysqliquery of the file admin-panel.php of the component Appointment Cancellation Handler. Executing a manipulation of the argument ID can lead to sql...

CVE-2026-111990 kishan0725 Hospital Management System Appointment Cancellation admin-panel.php mysqli_query sql injection

A weakness has been identified in kishan0725 Hospital Management System up to 777fda46b77a820977a5ba616283dbfbc40bf7e1. This affects the function mysqliquery of the file admin-panel.php of the component Appointment Cancellation Handler. Executing a manipulation of the argument ID can lead to sql...

CVE-2026-111990 kishan0725 Hospital Management System Appointment Cancellation admin-panel.php mysqli_query sql injection

A weakness has been identified in kishan0725 Hospital Management System up to 777fda46b77a820977a5ba616283dbfbc40bf7e1. This affects the function mysqliquery of the file admin-panel.php of the component Appointment Cancellation Handler. Executing a manipulation of the argument ID can lead to sql...

EUVD-2026-103673

A weakness has been identified in kishan0725 Hospital Management System up to 777fda46b77a820977a5ba616283dbfbc40bf7e1. This affects the function mysqliquery of the file admin-panel.php of the component Appointment Cancellation Handler. Executing a manipulation of the argument ID can lead to sql...

CVE-2026-111990 kishan0725 Hospital Management System Appointment Cancellation admin-panel.php mysqli_query sql injection

A weakness has been identified in kishan0725 Hospital Management System up to 777fda46b77a820977a5ba616283dbfbc40bf7e1. This affects the function mysqliquery of the file admin-panel.php of the component Appointment Cancellation Handler. Executing a manipulation of the argument ID can lead to sql...

CVE-2026-111990

The kishan0725 Hospital Management System (up to version 777fda46b77a820977a5ba616283dbfbc40bf7e1 ) is vulnerable to a SQL injection flaw. The issue resides in the Appointment Cancellation Handler component, specifically within the mysqli_query function of the admin-panel.php file. By manipulatin...

CVE-2025-27007-OttoKit-exploit

CVE-2025-27007: OttoKit SureTriggers Privilege Escalation Vulnerability Exploitation of CVE-2025-27007, a critical vulnerability in unauthorized privilege escalation in the OttoKit plugin formerly known as SureTriggers for WordPress. This repository outlines how an attacker can create an...