CVE-2026-105472

A SQL injection vulnerability exists in the Booking Handler component of the girishsaraf Online-Appointment-Booking-System (versions up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5 ). The flaw is located within an unknown function in the book.php file, where the manipulation of the Doctor/appointm...

CVE-2026-105472 girishsaraf Online-Appointment-Booking-System Booking book.php sql injection

A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. The affected element is an unknown function of the file book.php of the component Booking Handler. This manipulation of the argument Doctor/appointment causes sql...

CVE-2026-105472 girishsaraf Online-Appointment-Booking-System Booking book.php sql injection

A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. The affected element is an unknown function of the file book.php of the component Booking Handler. This manipulation of the argument Doctor/appointment causes sql...

CVE-2022-22963

CVE-2022-22963 Automatisation éducative de preuve de concept pour CVE-2022-22963, démontrée dans un environnement de laboratoire Hack The Box autorisé. Aperçu CVE-2022-22963 est une vulnérabilité de Spring Cloud Function impliquant l'en-tête spring.cloud.function.routing-expression. Dans des...

CVE-2025-26686-The-TCP-IP-Flaw-That-Opens-the-Gates

CVE-2025-26686-La-faille-TCP-IP-qui-ouvre-les-portes Une vulnérabilité critique d’exécution de code à distance dans la pile TCP/IP de Windows CVE-2025-26686 laisse une zone sensible de la mémoire déverrouillée, permettant à des attaquants distants de détourner des systèmes. Exploitable sur le...

CVE-2026-82989

There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticated attacker to inject arbitrary input into service endpoints via network-based HTTP requests to unauthenticated endpoints...

CVE-2026-82988

There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to trigger unprivileged APK installation via serving a malicious APK URL through an unauthenticated download endpoint...

CVE-2026-105762

Dify is an open-source LLM app development platform. Prior to 1.13.0, the /console/api/remote-files/upload endpoint in api/controllers/web/remotefiles.py accepted an attacker-controlled URL without authentication and caused the Dify server to retrieve it. A remote attacker could use the endpoint ...

CVE-2026-105471

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Impacted is an unknown function of the file signup.php of the component Registration Handler. The manipulation of the argument fname results in sql injection. The...

CVE-2026-105746

A flaw was found in Docling. The document processing pipeline fails to honor configurations that disable remote network services when utilizing the KServe V2 optical character recognition OCR model. This failure can result in unintended information disclosure, as page images from processed...

CVE-2026-92821 Sssd: sssd: access control bypass via premature ldap access rule evaluation

A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...

EUVD-2026-92894

A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...

CVE-2026-105759

A flaw was found in vLLM. An unauthenticated remote attacker can cause a denial of service DoS by sending requests with arbitrary, non-standard HTTP method names to unguarded server routes. Because the metrics tracking middleware records raw request methods into monitoring labels without validati...

CVE-2026-105756

A flaw was found in vllm. An authenticated remote attacker can cause a Denial of Service DoS by submitting an API request containing an invalid cache salt parameter with forbidden characters or excessive length. Because the application fails to validate the parameter before passing it to the...

LayarKacaSiber-CVE-2021-41773

CVE-2021-41773 - Apache HTTP Server 2.4.49 كيفية تشغيل مختبر CVE-2021-41773-Path Traversal 1. قم بتثبيت وتشغيل Docker على جهاز الكمبيوتر/اللابتوب الخاص بك 2. استنساخ هذا المستودع من GitHub 3. انتقل إلى مجلد Path Traversal 4. أدخل الأوامر التالية docker build -t cve-2021-41773-path-traversal . و...

CVE-2026-25212

CVE-2026-25212 – إثبات مفهوم لـ RCE في Percona PMM حرج – CVSS 9.9 – تنفيذ أوامر عن بعد مع المصادقة في PMM 3.7. الوصف يستغل هذا الإثبات المفهومي ثغرة حيث يحتفظ مستخدم PostgreSQL داخلي في PMM بصلاحيات 'SUPERUSER'. يمكن للمهاجم الموثَّق بحقوق 'pmm-admin' إساءة استخدام ميزة 'إضافة مصدر بيانات' وتنفيذ...

PT-2026-106317

A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file loginsystem/admin/change-password.php of the component Change Password Handler. This manipulation of the argument currentpassword causes...

PT-2026-106712

A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysql error of the file login.php of the component Login Endpoint. The manipulation of the argument username/password leads to sql injection. The atta...

ROS-20261006-73-0422

The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-106737

🚨 Hacktober Alert: Critical Citrix NetScaler pre-auth memory corruption flaw CVE-2024-88779 lets remote attackers crash enterprise ADC gateways. Read Blog: https://t.co/IPA85M7mwu sh3llc0d3 shellcode Hacktober NetScaler Vulnerabilities...