CVE-2026-19785 francoisjacquet RosarioSIS Student Medical Medical.inc.php sql injection

A vulnerability has been found in francoisjacquet RosarioSIS up to 12.7.4. This vulnerability affects unknown code of the file modules/Students/includes/Medical.inc.php of the component Student Medical Module. Such manipulation of the argument table leads to sql injection. The attack may be...

EUVD-2026-58569

A vulnerability has been found in francoisjacquet RosarioSIS up to 12.7.4. This vulnerability affects unknown code of the file modules/Students/includes/Medical.inc.php of the component Student Medical Module. Such manipulation of the argument table leads to sql injection. The attack may be...

CVE-2026-19785

A vulnerability has been found in francoisjacquet RosarioSIS up to 12.7.4. This vulnerability affects unknown code of the file modules/Students/includes/Medical.inc.php of the component Student Medical Module. Such manipulation of the argument table leads to sql injection. The attack may be...

CVE-2026-19785 francoisjacquet RosarioSIS Student Medical Medical.inc.php sql injection

A vulnerability has been found in francoisjacquet RosarioSIS up to 12.7.4. This vulnerability affects unknown code of the file modules/Students/includes/Medical.inc.php of the component Student Medical Module. Such manipulation of the argument table leads to sql injection. The attack may be...

CVE-2026-19785 francoisjacquet RosarioSIS Student Medical Medical.inc.php sql injection

A vulnerability has been found in francoisjacquet RosarioSIS up to 12.7.4. This vulnerability affects unknown code of the file modules/Students/includes/Medical.inc.php of the component Student Medical Module. Such manipulation of the argument table leads to sql injection. The attack may be...

CVE-2026-19880: Improper Limitation of a Pathname to a Restricted Directory

Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java logback-classic module allows path-traversal vulnerability. More specifically, an MDC-based discriminator value flows unsanitized into a nested FileAppender path, letting an attacker who influences that MDC value e.g. via an HTTP...

CVE-2026-19785: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in francoisjacquet RosarioSIS up to 12.7.4. This vulnerability affects unknown code of the file modules/Students/includes/Medical.inc.php of the component Student Medical Module. Such manipulation of the argument table leads to sql injection. The attack may be...

CVE-2026-19870: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key in the payroll module in Roskus Prospero Flow CRM before 5.15.10 allows authenticated users holding the read payroll permission to view the salary and banking details of employees of any other company in the instance, and users holding the create...

CVE-2026-73679: Improper Control of Generation of Code

ImpressCMS contains an authenticated remote code execution vulnerability in the custom tag module that allows authenticated administrators to execute arbitrary PHP code by storing a malicious payload in a custom tag with PHP type enabled. The application decodes HTML-encoded content via...

Linux Distros Unpatched Vulnerability : CVE-2026-56864

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. This attack allows for a coordinating GOPROXY and...

PT-2026-72014

Authorization Bypass Through User-Controlled Key in the payroll module in Roskus Prospero Flow CRM before 5.15.10 allows authenticated users holding the read payroll permission to view the salary and banking details of employees of any other company in the instance, and users holding the create...

PT-2026-72089

Name of the Vulnerable Software and Affected Versions ImpressCMS affected versions not specified Description An authenticated remote code execution issue exists in the custom tag module. Authenticated administrators can execute arbitrary PHP code by storing a malicious payload in a custom tag wit...

PT-2026-72114

Name of the Vulnerable Software and Affected Versions iCagenda versions prior to 4.0.11 Description An unauthenticated SQL injection exists in the mod icagenda calendar module. This issue is reachable via the com ajax endpoint without requiring a session, token, or account. SQL injection is a...

PT-2026-71952

Name of the Vulnerable Software and Affected Versions RosarioSIS versions prior to 12.8 Description A SQL injection issue exists in the Student Medical Module within the modules/Students/includes/Medical.inc.php file. This flaw allows a remote attacker to execute unauthorized database queries by...

Jinja2 Code Execution

The vulnerability of the jinja2.Template function in the api/core/helper/codeexecutor/jinja2/jinja2transformer.py file, a Jinja2 template processor for Dify application development, is related to the lack of measures taken to eliminate special elements in the template creation mechanism. Exploiti...

Linux ipvlan DoS

The vulnerability of Linux operating system’s ipvlan kernel components is related to insufficient blocking measures. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Buffer Overflow DoS

The vulnerability of the Linux operating system’s kernel is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Oracle Application Testing Suite Load Testing Full Control

The vulnerability of the Load Testing module for web apps within the Oracle Application Testing Suite relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the TCP protocol...

Linux Distros Unpatched Vulnerability : CVE-2026-56865

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist...

erlang: Erlang OTP public_key: Certificate chain forgery via improper trust chain validation

A flaw was found in Erlang OTP's publickey module. This vulnerability CWE-295, related to improper certificate validation, allows a non-Certificate Authority CA certificate to be accepted as an intermediate issuer. A remote attacker, holding an end-entity certificate issued by a trusted CA, can...