Vulnerability of endpoints/api/restore and/api/users/admin/init of the Kubernetes management platform, allowing attackers to escalate their privileges

The vulnerability of the endpoints /api/restore and /api/users/admin/init of the Kubernetes management platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain increased privileges remotely...

CVE-2026-105176: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /Admin/editclass.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed...

CVE-2026-105184: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Online Admission System 1.0. The impacted element is an unknown function of the file /admin/creteria.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

PT-2026-106016

Name of the Vulnerable Software and Affected Versions ApiAdmin versions prior to 5.1 Description SQL Injection occurs in the user-list endpoint "/admin/User/getUsers" through the gid parameter. SQL Injection is a technique where malicious SQL statements are inserted into entry fields for executio...

CVE-2026-88396

ApiAdmin v5.0 and before is vulnerable to Directory Traversal. The admin file-upload endpoint POST /admin/Index/upload in ApiAdmin takes the uploaded file's extension verbatim there is no whitelist, blacklist or content check and moveuploadedfile drops the file into the web-accessible directory...

CVE-2026-104970: Concurrent Execution using Shared Resource with Improper Synchronization

Plane is an open-source project management tool. From 0.13 until 1.4.0, InstanceAdminSignUpEndpoint in apps/api/plane/license/api/views/admin.py:89-117, 173-229 uses InstanceAdmin.objects.first for the first-admin check and performs account creation without an atomic transaction, row lock,...

CVE-2026-88396

ApiAdmin v5.0 and before is vulnerable to Directory Traversal. The admin file-upload endpoint POST /admin/Index/upload in ApiAdmin takes the uploaded file's extension verbatim there is no whitelist, blacklist or content check and moveuploadedfile drops the file into the web-accessible directory...

PT-2026-106178

Name of the Vulnerable Software and Affected Versions Ghost versions 4.0.0 through 6.66.0 Description SVG images included in content imports are stored without sanitization. This allows an attacker to convince an Administrator to import a crafted file to host scripts on the site domain, which cou...

DotCMS-CVE-2022-45782

CVE-2022-45782 – قابلية توقع رمز إعادة تعيين كلمة المرور في dotCMS إثبات المفهوم يحتوي هذا المستودع على إثبات مفهوم لاستغلال CVE-2022-45782، وهي ثغرة في dotCMS حيث يتم إنشاء رموز إعادة تعيين كلمة المرور باستخدام الطريقة غير المشفرة RandomStringUtils.randomAlphanumeric. نظرًا لأن هذا الرمز يمكن...

CVE-2024-57523.

CVE-2024-57523 - ثغرة CSRF في Users.php - نظام إدارة شركات التعبئة والنقل من SourceCodester الإصدار 1.0 الوصف يحتوي هذا المستودع على دليل إثبات المفهوم PoC لثغرة تزوير الطلب عبر المواقع CSRF في نظام إدارة شركات التعبئة والنقل الإصدار 1.0 من SourceCodester. توجد الثغرة في نقطة نهاية Users.php ،...

CVE-2026-105171

A security vulnerability exists in the Role Attribute Handler component of the kishor-23 food-waste-management-system (specifically within the file admin/admin.php). The flaw is caused by improper authorization, where manipulation of the Name argument leads to an authorization bypass . This vulne...

CVE-2026-105171 kishor-23 food-waste-management-system Role Attribute admin.php authorization

A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by this vulnerability is an unknown functionality of the file admin/admin.php of the component Role Attribute Handler...

CVE-2026-105171 kishor-23 food-waste-management-system Role Attribute admin.php authorization

A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by this vulnerability is an unknown functionality of the file admin/admin.php of the component Role Attribute Handler...

CVE-2026-105171 kishor-23 food-waste-management-system Role Attribute admin.php authorization

A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by this vulnerability is an unknown functionality of the file admin/admin.php of the component Role Attribute Handler...

CVE-2026-105170 kishor-23 food-waste-management-system Admin Signup signup.php missing authentication

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected is an unknown function of the file admin/signup.php of the component Admin Signup. This manipulation of the argument sign causes...

CVE-2026-105170 kishor-23 food-waste-management-system Admin Signup signup.php missing authentication

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected is an unknown function of the file admin/signup.php of the component Admin Signup. This manipulation of the argument sign causes...

CVE-2026-105170

A vulnerability exists in the kishor-23 food-waste-management-system within the Admin Signup component. An unknown function in the file admin/signup.php allows for missing authentication due to the manipulation of the sign argument. This flaw can be exploited remotely , and a public exploit is av...

CVE-2026-105170 kishor-23 food-waste-management-system Admin Signup signup.php missing authentication

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected is an unknown function of the file admin/signup.php of the component Admin Signup. This manipulation of the argument sign causes...

CVE-2020-24033

أحدث إصدار من fs.com S3900 24T4S 1.7.1 وجميع الإصدارات السابقة، ثغرة CSRF في الإدارة الخلفية النموذج لا يمتلك آلية مصادقة أو مصادقة رمزية token، وبالتالي توجد ثغرة تزوير الطلبات عبر المواقع Cross-Site Request Forgery إضافة حساب مستخدم لإضافة مستخدم بصلاحية كاملة. جميع النماذج على S3900 24T4S معرض...

CVE-2024-33209

CVE-2024-33209 FlatPress 1.3. عرضة للبرمجة النصية عبر المواقع XSS. يمكن للمهاجم حقن كود JavaScript خبيث في قسم "إضافة إدخال جديد"، مما يتيح له تنفيذ كود تعسفي في سياق متصفح الويب الخاص بالضحية. نوع الثغرة: البرمجة النصية عبر المواقع XSS بائع المنتج : flatpress CMS قاعدة كود المنتج المتأثر :...