AlmaLinux 9.2 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-core / nginx-filesystem / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1753207126)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1753207126 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

PT-2026-103712

A vulnerability was found in datadrivenconstruction OpenConstructionERP up to 14.8.1. The impacted element is an unknown function of the file backend/app/modules/ai/ai client.py of the component Al Provider Configuration Handler. Performing a manipulation results in exposure of data element to...

Rocky Linux 8.6 [CIQ] Security Update: nginx / nginx-all-modules / nginx-debuginfo / nginx-debugsource / etc (ciqsa-2026_0999)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260999 advisory. This advisory aggregates security fixes for the nginx SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2023-44487. Tenable has extracted the preceding description blo...

Rocky Linux 8.6 [CIQ] Security Update: varnish-modules / varnish-modules-debuginfo / etc (ciqsa-2026_0274)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260274 advisory. This advisory aggregates security fixes for the varnish-modules SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2023-44487. Tenable has extracted the preceding...

CVE-2026-102384

Author Cross Site Scripting XSS in Supreme Modules Lite = 2.5.63 versions...

CVE-2026-102384 WordPress Supreme Modules Lite plugin <= 2.5.63 - Cross Site Scripting (XSS) vulnerability

Author Cross Site Scripting XSS in Supreme Modules Lite = 2.5.63 versions...

CVE-2026-102384

The WordPress Supreme Modules Lite plugin in versions

EUVD-2026-89940

Author Cross Site Scripting XSS in Supreme Modules Lite = 2.5.63 versions...

WordPress Supreme Modules Lite plugin <= 2.5.63 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Supreme Modules Lite versions = 2.5.63...

CVE-2026-103113

A vulnerability was determined in OS4ED openSIS-Classic up to 9.3. The affected element is the function save action of the file modules/students/Student.php of the component General Information Tab. Executing a manipulation of the argument students can lead to sql injection. The attack may be...

CVE-2026-103113 OS4ED openSIS-Classic General Information Tab Student.php save action sql injection

A vulnerability was determined in OS4ED openSIS-Classic up to 9.3. The affected element is the function save action of the file modules/students/Student.php of the component General Information Tab. Executing a manipulation of the argument students can lead to sql injection. The attack may be...

EUVD-2026-89762

A vulnerability was determined in OS4ED openSIS-Classic up to 9.3. The affected element is the function save action of the file modules/students/Student.php of the component General Information Tab. Executing a manipulation of the argument students can lead to sql injection. The attack may be...

CVE-2026-103113

The OS4ED openSIS-Classic software (up to version 9.3 ) is vulnerable to SQL injection in the General Information Tab component. The flaw exists within the save action function of the modules/students/Student.php file. An attacker can exploit this by manipulating the students argument, which may ...

@queenanya/invite (>=1.0.0, <=5.0.0), @queenanya/modules (>=5.0.1-0, <=6.1.0) potentially affected by unknown CVE via @queenanya/baileys (9.10.1)

@queenanya/baileys NPM version 9.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on @queenanya/baileys and may be impacted: - @queenanya/invite =1.0.0, =5.0.1-0, =6.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2026-17373...

@queenanya/invite (>=1.0.0, <=5.0.0), @queenanya/modules (>=5.0.1-0, <=6.1.0) potentially affected by unknown CVE via @queenanya/baileys (9.10.1)

@queenanya/baileys NPM version 9.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on @queenanya/baileys and may be impacted: - @queenanya/invite =1.0.0, =5.0.1-0, =6.1.0 Source cves: unknown CVE Source advisory: SNYK:JS-QUEENANYABAILEYS-20336218...

CVE-2026-102844

A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This vulnerability affects the function detail of the file application/modules/admin/controllers/laporandatapasien.php. Executing a manipulation of the argument idparam can lead to...

CVE-2026-102384: Improper Neutralization of Input During Web Page Generation

Author Cross Site Scripting XSS in Supreme Modules Lite = 2.5.63 versions...

CVE-2026-103113: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in OS4ED openSIS-Classic up to 9.3. The affected element is the function save action of the file modules/students/Student.php of the component General Information Tab. Executing a manipulation of the argument students can lead to sql injection. The attack may be...

PT-2026-103116

A vulnerability was determined in OS4ED openSIS-Classic up to 9.3. The affected element is the function save action of the file modules/students/Student.php of the component General Information Tab. Executing a manipulation of the argument students can lead to sql injection. The attack may be...

PT-2026-103118

A vulnerability was identified in OS4ED openSIS-Classic up to 9.3. The impacted element is the function DBQuery assignment of the file modules/grades/Assignments.php of the component Assignment Management Endpoint. The manipulation of the argument Tables leads to sql injection. It is possible to...