CVE-2026-108937 code-projects Online Ticket Reservation System medallion.sql file information disclosure

A vulnerability was detected in code-projects Online Ticket Reservation System 1.0. This vulnerability affects unknown code of the file /database/medallion.sql. The manipulation results in file and directory information exposure. It is possible to launch the attack remotely. The exploit is now...

CVE-2026-108937

A vulnerability exists in the code-projects Online Ticket Reservation System 1.0 affecting the /database/medallion.sql file. This flaw allows for the exposure of file and directory information through remote manipulation. The vulnerability is associated with CWE-538 and CWE-200 . While the specif...

CVE-2024-58390

The Frappe application, versions before 14.81.4 and 15.x before 15.41.0 , is vulnerable to an improper privilege management issue (CWE-269). A specific document action allows authenticated attackers with Website User access to perform additional steps to escalate their privileges to System Manage...

CVE-2024-58390 Frappe before 15.41.0 Privilege Escalation via Document Action

Frappe before 14.81.4 and 15.x before 15.41.0 contains an improper privilege management vulnerability involving a certain document action that permits escalation from the Website User role to System Manager. Authenticated attackers with Website User access can combine this document action with...

CVE-2024-58390 Frappe before 15.41.0 Privilege Escalation via Document Action

Frappe before 14.81.4 and 15.x before 15.41.0 contains an improper privilege management vulnerability involving a certain document action that permits escalation from the Website User role to System Manager. Authenticated attackers with Website User access can combine this document action with...

kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()

A flaw was found in the Linux kernel's IPv4 networking component. The ipv4sysctlexitnet function prematurely frees the net-ipv4.sysctllocalreservedports memory. This can lead to a use-after-free vulnerability, where other threads might attempt to access deallocated memory. Such an issue can resul...

CVE-2026-108928

A security vulnerability has been detected in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file /admin/sum.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

CVE-2026-108927

A weakness has been identified in itsourcecode Baptism Information Management System 1.0. This vulnerability affects unknown code of the file pbaptism.php. This manipulation of the argument bid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made availab...

CVE-2026-108926

A security flaw has been discovered in itsourcecode Baptism Information Management System 1.0. This affects an unknown part of the file ebaptism.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released to the public...

CVE-2026-108928 itsourcecode Online Admission System sum.php sql injection

A security vulnerability has been detected in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file /admin/sum.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

EUVD-2026-97835

A security vulnerability has been detected in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file /admin/sum.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

CVE-2026-108928

The itsourcecode Online Admission System 1.0 is vulnerable to SQL injection due to improper processing of the ID argument within the /admin/sum.php file. This flaw allows for remote execution of the attack. The exploit has been disclosed publicly and may be used. No specific remediation or exploi...

kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()

A flaw was found in the Linux kernel's IPv4 networking component. The ipv4sysctlexitnet function prematurely frees the net-ipv4.sysctllocalreservedports memory. This can lead to a use-after-free vulnerability, where other threads might attempt to access deallocated memory. Such an issue can resul...

EUVD-2026-97827

A weakness has been identified in itsourcecode Baptism Information Management System 1.0. This vulnerability affects unknown code of the file pbaptism.php. This manipulation of the argument bid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made availab...

CVE-2026-108927 itsourcecode Baptism Information Management System pbaptism.php sql injection

A weakness has been identified in itsourcecode Baptism Information Management System 1.0. This vulnerability affects unknown code of the file pbaptism.php. This manipulation of the argument bid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made availab...

CVE-2026-108927

The itsourcecode Baptism Information Management System 1.0 is vulnerable to SQL injection due to improper handling of the b_id argument in the pbaptism.php file. This weakness can be triggered remotely. Public exploits for this vulnerability are available and have been reported as sighted in the ...

CVE-2026-108926 itsourcecode Baptism Information Management System ebaptism.php sql injection

A security flaw has been discovered in itsourcecode Baptism Information Management System 1.0. This affects an unknown part of the file ebaptism.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released to the public...

EUVD-2026-97821

A security flaw has been discovered in itsourcecode Baptism Information Management System 1.0. This affects an unknown part of the file ebaptism.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released to the public...

CVE-2026-108926

The itsourcecode Baptism Information Management System 1.0 is vulnerable to a SQL injection flaw within the ebaptism.php file. The vulnerability is triggered by the manipulation of the ID argument and can be exploited remotely. While the impact is described as a medium-severity security flaw, the...

CVE-2026-108919

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. The impacted element is an unknown function of the file Auth/addstudent.php of the component Student Registration. This manipulation of the argument txtname/txtpassword/txtemail/txtphone/txtpreviousschool causes cros...