AlmaLinux 9.2 [TuxCare] Security Update: mariadb / mariadb-backup / mariadb-common / mariadb-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792636681)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792636681 advisory. - MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and...

PT-2026-121370

Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL by registering crafted subscription filter keys that bypass keyword-only validation. Attackers can create subscriptions using the malicious key, which is rendered as an unquoted...

Cisco ISE Policy Management SQL Injection

The vulnerability of the Cisco Identity Services Engine ISE policy management platform and the Cisco ISE Passive Identity Connector ISE-PIC virtual authentication data collection device is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows an...

Cisco ISE Policy Management SQL Injection

The vulnerability of the Cisco Identity Services Engine ISE policy management platform and the Cisco ISE Passive Identity Connector ISE-PIC virtual authentication data collection device is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a...

Cisco ISE Policy Management SQL Injection

The vulnerability of the Cisco Identity Services Engine ISE policy management platform and the Cisco ISE Passive Identity Connector ISE-PIC virtual authentication data collection device is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows an...

WordPress NotificationX SQL injection vulnerability

WordPress NotificationX versions from 2.0.0 up to 2.3.12 contain an SQL injection vulnerability. This vulnerability stems from improper handling of array-formatted id parameters in /wp-json/notificationx/v1/notification/id. Unauthenticated remote attackers can supply an id containing specially...

PT-2026-120946

Frappe Framework before 16.33.0 contains a blind SQL injection vulnerability in the frappe.desk.doctype.event.event.get events method, which fails to properly neutralize user-supplied input before including it in SQL queries. Authenticated attackers can send crafted input to get events and infer...

Oracle Linux 8 : php:7.4 (ELSA-2026-87080)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-87080 advisory. - Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix IPv6 ACL bypass in FastCGI listen.allowedclients due to partial address...

Progress MOVEit Transfer SQL Injection

Progress MOVEit Transfer contains an unauthenticated SQL injection vulnerability that could allow unauthorized access to database information and exposure of sensitive data...

CVE-2026-114441

A weakness has been identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/update.php. This manipulation of the argument action/fullname/visano/hiden/title/description/pageid/user causes sql injection. The attack may be initiated remotely. T...

CVE-2026-114440

A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/delete.php. The manipulation of the argument costomerid/ticketid/paymentid/id/documentid/salaryid/empid/userid leads to sql injection. The attack can be initiated remotely. The...

CVE-2026-114441 oretnom23 php-travel-agency-system update.php sql injection

A weakness has been identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/update.php. This manipulation of the argument action/fullname/visano/hiden/title/description/pageid/user causes sql injection. The attack may be initiated remotely. T...

CVE-2026-114441 oretnom23 php-travel-agency-system update.php sql injection

A weakness has been identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/update.php. This manipulation of the argument action/fullname/visano/hiden/title/description/pageid/user causes sql injection. The attack may be initiated remotely. T...

CVE-2026-114441 oretnom23 php-travel-agency-system update.php sql injection

A weakness has been identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/update.php. This manipulation of the argument action/fullname/visano/hiden/title/description/pageid/user causes sql injection. The attack may be initiated remotely. T...

CVE-2026-114441

The oretnom23 php-travel-agency-system software contains a SQL injection vulnerability affecting the processing of the admin/update.php file. Attackers can initiate this attack remotely by manipulating specific arguments, including action , full_name , visa_no , hiden , title , description , page...

CVE-2026-114440 oretnom23 php-travel-agency-system delete.php sql injection

A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/delete.php. The manipulation of the argument costomerid/ticketid/paymentid/id/documentid/salaryid/empid/userid leads to sql injection. The attack can be initiated remotely. The...

CVE-2026-114440

A SQL injection vulnerability exists in the oretnom23 php-travel-agency-system within the admin/delete.php file. Attackers can initiate a remote attack by manipulating the costomer_id , ticket_id , payment_id , id , document_id , salary_id , emp_id , or user_id arguments. While the exploit is pub...

CVE-2026-114440 oretnom23 php-travel-agency-system delete.php sql injection

A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/delete.php. The manipulation of the argument costomerid/ticketid/paymentid/id/documentid/salaryid/empid/userid leads to sql injection. The attack can be initiated remotely. The...

CVE-2026-114384

A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. Affected is an unknown function of the file /transactionsave.php. Such manipulation of the argument del leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly...

CVE-2026-114381

A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /orderdetail.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly...