EUVD-2026-92841

A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This issue affects the function mysqliquery of the file locateus.php of the component Doctor Search Endpoint. The manipulation of the argument doctorname leads to sql...

EUVD-2026-92816

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file Admin/mlogin.php of the component Login Handler. Performing a manipulation of the argument uname/pass results in sql...

CVE-2026-105472 girishsaraf Online-Appointment-Booking-System Booking book.php sql injection

A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. The affected element is an unknown function of the file book.php of the component Booking Handler. This manipulation of the argument Doctor/appointment causes sql...

EUVD-2026-92897

A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. The affected element is an unknown function of the file book.php of the component Booking Handler. This manipulation of the argument Doctor/appointment causes sql...

CVE-2026-105472

A SQL injection vulnerability exists in the Booking Handler component of the girishsaraf Online-Appointment-Booking-System (versions up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5 ). The flaw is located within an unknown function in the book.php file, where the manipulation of the Doctor/appointm...

CVE-2026-105472 girishsaraf Online-Appointment-Booking-System Booking book.php sql injection

A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. The affected element is an unknown function of the file book.php of the component Booking Handler. This manipulation of the argument Doctor/appointment causes sql...

CVE-2026-105472 girishsaraf Online-Appointment-Booking-System Booking book.php sql injection

A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. The affected element is an unknown function of the file book.php of the component Booking Handler. This manipulation of the argument Doctor/appointment causes sql...

[SECURITY] Fedora 45 Update: rocq-9.3.0-2.fc45

Rocq is a formal proof management system. It provides a formal language to write mathematical definitions, executable algorithms and theorems together with an environment for semi-interactive development of machine-checked proof s. Typical applications include the certification of properties of...

[SECURITY] Fedora 45 Update: ocaml-obuild-0.3.0-3.fc45

A parallel, incremental and declarative build system for OCaml. The goal is to make a very simple build system for users and developers of OCaml libraries and programs. Obuild acts as a building black box: users only declare what they want to build and with which sources; the build system will...

[SECURITY] Fedora 45 Update: ocaml-omake-0.10.7-11.fc45

OMake is a build system designed for scalability and portability. It uses a syntax similar to make utilities you may have used, but it features many additional enhancements, including the following. Support for projects spanning several directories or directory hierarchies. Fast, reliable,...

CVE-2026-105471

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Impacted is an unknown function of the file signup.php of the component Registration Handler. The manipulation of the argument fname results in sql injection. The...

CVE-2026-86361: Incorrect Permission Assignment for Critical Resource

Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-86684: Incorrect Authorization

The Gitea push mirror API checked whether the repository owner, instead of the requesting user, may use local file system paths. On instances with security IMPORTLOCALPATHS = true, a repository administrator who is not allowed to import local paths could add a push mirror to a local path on the...

PT-2026-107289

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description The push mirror API incorrectly validates permissions by checking if the repository owner, rather than the requesting user, is authorized to use local file system paths. On instances where the...

Local Privilege Escalation and Configuration Injection in Brocade Fabric OS System Logging Daemon

: A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls on internal inter-process communication IPC channels allow an unprivileged local user to submit malformed logging...

PT-2026-106786

Name of the Vulnerable Software and Affected Versions SourceCodester Performance Indicator System version 1.0 Description An issue exists in the /opils/admin/view product.php file where manipulating the Category argument allows for SQL injection, a technique used to interfere with the queries tha...

PT-2026-106291

Name of the Vulnerable Software and Affected Versions girishsaraf Online-Appointment-Booking-System versions up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5 Description A remote SQL injection exists within the Booking Handler component in the book.php file. The issue occurs when the...

PT-2026-106387

Unauthenticated Privilege Escalation in Salon booking system = 10.31.7 versions...

ROS-20261006-73-0065

The vulnerability of the logicvcdrmconfigparse function in the drivers/gpu/drm/logicvc/logicvcdrm.c file of the Direct Rendering Infrastructure DRI driver module in the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability may allow a remote attacker to cau...

CVE-2026-102163: Out-of-bounds Write

On affected Arista access points with Wireless Intrusion Prevention System WIPS active, an unauthenticated attacker within radio frequency RF proximity can send a crafted frame to crash the sensor service, disabling WIPS monitoring on the access point, or potentially achieve remote code execution...