EUVD-2026-60557

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This issue affects some unknown processing of the file /editsubject1.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit...

EUVD-2026-60472

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /BSCE2.php. Such manipulation of the argument course leads to cross site scripting. The attack may be launched remotely. The exploit is publicly...

EUVD-2026-60504

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2026-75087

In itsourcecode Hospital Management System 1.0, the delid parameter passed to /viewdepartment.php is concatenated unsanitized into a SQL query, enabling unauthenticated remote SQL injection with proof-of-concept exploit code already publicly available. No patch or workaround is mentioned in any s...

CVE-2026-75087

A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /viewdepartment.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be...

EUVD-2026-60561

A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /viewdepartment.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be...

CVE-2026-75079

A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /editsubject2.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been made...

CVE-2026-75080

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This issue affects some unknown processing of the file /editsubject1.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit...

CVE-2026-75086

A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /viewroom.php. Such manipulation of the argument delid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2026-75086 itsourcecode Hospital Management System viewroom.php sql injection

A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /viewroom.php. Such manipulation of the argument delid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2026-75086

The itsourcecode Hospital Management System 1.0 is vulnerable to SQL injection via the delid argument in /viewroom.php, exploitable remotely with low privileges. CVSS 6.3 (Medium); a proof-of-concept exists, but no patch version or remediation is specified in the provided documents.

PT-2026-77945

Name of the Vulnerable Software and Affected Versions Oracle Commerce Platform version 11.4.0 Description A flaw in the Dynamo Application Framework component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a complete...

PT-2026-78063

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon version 3.2.18 Description A flaw in the Imperative Web Server component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a full...

PT-2026-77983

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw exists in the Content Acquisition System component. A low privileged attacker with access to the infrastructure where the software executes ca...

PT-2026-77968

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Content Acquisition System component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successf...

PT-2026-77979

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Content Acquisition System. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP ...

PT-2026-77972

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Content Acquisition System. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP...

PT-2026-77734

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Profitability and Cost Management version 11.2.25.0.000 Description A flaw in the Deployment component allows a high privileged attacker with network access via HTTP to compromise the system. Successful exploitation can result ...

PT-2026-77736

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager for Systems Infrastructure version 13.5 Oracle Enterprise Manager for Systems Infrastructure version 24.1 Description A flaw in the Storage Server Management component allows a low privileged attacker with network...

PT-2026-76886

A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /viewroom.php. Such manipulation of the argument delid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...