CVE-2026-16228 SourceCodester Class and Exam Timetabling System edit_schoolyr.php sql injection

A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /editschoolyr.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and...

CVE-2026-16227

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This impacts an unknown function of the file /editsubject.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed...

CVE-2026-53372

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking Kernel lacks dirty tracking support on nested domain attached to PASID, fails the attachment early if nesting parent domain is dirty tracking configured,...

CVE-2026-16224

A vulnerability was identified in jxxghp MoviePilot up to 2.13.5. The affected element is an unknown function of the file /jxxghp/MoviePilot of the component Application API. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The identifier of the pat...

CVE-2026-16217

A security vulnerability has been detected in guohongze adminset up to 0.61. Affected by this vulnerability is an unknown functionality of the file delivery/deli.py of the component Delivery Deployment Endpoint. The manipulation of the argument projectid leads to authorization bypass. It is...

EUVD-2026-45431

A vulnerability has been found in code-projects Online Examination System 1.0. This vulnerability affects unknown code of the file /account.php?q=quiz. Such manipulation of the argument eid/n/t leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to t...

CVE-2026-16217

A security vulnerability has been detected in guohongze adminset up to 0.61. Affected by this vulnerability is an unknown functionality of the file delivery/deli.py of the component Delivery Deployment Endpoint. The manipulation of the argument projectid leads to authorization bypass. It is...

CVE-2026-16217 guohongze adminset Delivery Deployment Endpoint deli.py authorization

A security vulnerability has been detected in guohongze adminset up to 0.61. Affected by this vulnerability is an unknown functionality of the file delivery/deli.py of the component Delivery Deployment Endpoint. The manipulation of the argument projectid leads to authorization bypass. It is...

CVE-2026-16217 guohongze adminset Delivery Deployment Endpoint deli.py authorization

A security vulnerability has been detected in guohongze adminset up to 0.61. Affected by this vulnerability is an unknown functionality of the file delivery/deli.py of the component Delivery Deployment Endpoint. The manipulation of the argument projectid leads to authorization bypass. It is...

CVE-2026-16206

A security vulnerability has been detected in django-oauth django-oauth-toolkit 3.3.0. This issue affects the function loadidtoken of the file oauth2provider/oauth2validators.py. The manipulation leads to session expiration. The attack can be initiated remotely. The project was informed of the...

CVE-2026-16206 django-oauth django-oauth-toolkit oauth2_validators.py _load_id_token session expiration

A security vulnerability has been detected in django-oauth django-oauth-toolkit 3.3.0. This issue affects the function loadidtoken of the file oauth2provider/oauth2validators.py. The manipulation leads to session expiration. The attack can be initiated remotely. The project was informed of the...

CVE-2026-16206

Affected software: django-oauth-toolkit 3.3.0. Root cause: manipulation in the function _load_id_token within oauth2_provider/oauth2_validators.py. Impact as stated: session expiration. Attack can be initiated remotely over the network. Status of remediation: not provided in the connected documen...

CVE-2026-16206 django-oauth django-oauth-toolkit oauth2_validators.py _load_id_token session expiration

A security vulnerability has been detected in django-oauth django-oauth-toolkit 3.3.0. This issue affects the function loadidtoken of the file oauth2provider/oauth2validators.py. The manipulation leads to session expiration. The attack can be initiated remotely. The project was informed of the...

EUVD-2026-45417

A security vulnerability has been detected in django-oauth django-oauth-toolkit 3.3.0. This issue affects the function loadidtoken of the file oauth2provider/oauth2validators.py. The manipulation leads to session expiration. The attack can be initiated remotely. The project was informed of the...

PT-2026-61435

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.1-rc3 Description A double free issue exists in the qed cxt tables alloc function. When a PF or VF CID bitmap allocation fails, qed cid map alloc triggers a jump to cid map fail and frees previously allocated C...

PT-2026-61347

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access occurs in the ieee80211 ml epcs function when processing a PRIO ACCESS ML element PER STA PROFILE subelement. A connected WiFi 7 AP can trigger this by sending an...

PT-2026-61040

Name of the Vulnerable Software and Affected Versions django-oauth-toolkit version 3.3.0 Description A remote attack targeting the load id token function within the oauth2 provider/oauth2 validators.py file can lead to session expiration. Recommendations At the moment, there is no information abo...

PT-2026-61104

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory management issue exists in the nfsd component. When nfsd4 layout setlease fails, the error path incorrectly frees the layout stateid using kmem cache free without calling idr...

PT-2026-61351

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Time-of-Check to Time-of-Use TOCTOU double-fetch issue exists in the mana hwc rx event handler function. The hwc msg id is read from DMA-coherent memory and bounds-checked, but is...

PT-2026-61483

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm ffa firmware component where the bus match callback unconditionally dereferences the id table of FF-A drivers. Because the system assumes every driver provides...