CVE-2026-75087 itsourcecode Hospital Management System viewdepartment.php sql injection

A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /viewdepartment.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be...

CVE-2026-75087 itsourcecode Hospital Management System viewdepartment.php sql injection

A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /viewdepartment.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be...

EUVD-2026-60561

A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /viewdepartment.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be...

CVE-2026-75082

A flaw has been found in Webkul Bagisto up to 2.4.4. The affected element is an unknown function of the file /customer/register of the component Customer-Registration Notification Email. This manipulation of the argument firstname/lastname causes basic cross site scripting. It is possible to...

CVE-2026-75081

A vulnerability was detected in Webkul Bagisto up to 2.4.4. Impacted is an unknown function of the file /customer/account/rma/store. The manipulation of the argument rmaqty/resolutiontype/rmareasonid results in enforcement of behavioral workflow. The attack may be performed from remote. The explo...

CVE-2026-75086

A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /viewroom.php. Such manipulation of the argument delid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

EUVD-2026-60560

A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /viewroom.php. Such manipulation of the argument delid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2026-75086 itsourcecode Hospital Management System viewroom.php sql injection

A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /viewroom.php. Such manipulation of the argument delid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2026-75086

The itsourcecode Hospital Management System 1.0 is vulnerable to SQL injection via the delid argument in /viewroom.php, exploitable remotely with low privileges. CVSS 6.3 (Medium); a proof-of-concept exists, but no patch version or remediation is specified in the provided documents.

CVE-2026-75082 Webkul Bagisto Customer-Registration Notification Email register cross site scripting

A flaw has been found in Webkul Bagisto up to 2.4.4. The affected element is an unknown function of the file /customer/register of the component Customer-Registration Notification Email. This manipulation of the argument firstname/lastname causes basic cross site scripting. It is possible to...

CVE-2026-75082

Bagisto up to 2.4.4 is vulnerable to reflected XSS via the first_name/last_name arguments in the Customer-Registration Notification Email component. The exploit has been published; the vendor confirms some items are fixed and remaining ones are planned for upcoming releases.

CVE-2026-75082

A flaw has been found in Webkul Bagisto up to 2.4.4. The affected element is an unknown function of the file /customer/register of the component Customer-Registration Notification Email. This manipulation of the argument firstname/lastname causes basic cross site scripting. It is possible to...

EUVD-2026-60559

A flaw has been found in Webkul Bagisto up to 2.4.4. The affected element is an unknown function of the file /customer/register of the component Customer-Registration Notification Email. This manipulation of the argument firstname/lastname causes basic cross site scripting. It is possible to...

Amazon Linux 2023 : freerdp, freerdp-devel, freerdp-libs (ALAS2023-2026-2053)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2053 advisory. FreeRDP before 3.28.0 affected outlength, so out-of-bounds bytes are written before the bounds check. On the server side, when a client selects RDP Standard Security, the encrypted client rand...

Zoom Workplace < 7.1.5 Vulnerability (ZSB-26017)

The version of Zoom Workplace installed on the remote host is prior to 7.1.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-26017 advisory. - Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code execution of anoth...

Zoom Workplace < 7.1.0 Vulnerability (ZSB-26016)

The version of Zoom Workplace installed on the remote host is prior to 7.1.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-26016 advisory. - Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to...

Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-2045)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2045 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix race condition during PASID entry replacement CVE-2026-45945 In the Linux kernel, the following vulnerabilit...

Linux Distros Unpatched Vulnerability : CVE-2026-68465

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mmc: sdhci-esdhc-imx: fix esdhcchangepinstate to allow default state restore esdhcchangepinstate checks for pins100mhz and pins200mhz at the top of the function...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102126)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102126 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: Return NULL when htblookupleaf encounters an empty rbtree htblookupleaf has a BUGON...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101989)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101989 advisory. In the Linux kernel, the following vulnerability has been resolved: writeback: fix race between cgroupwritebackumount and inodeswitchwbs When a container exits, the...