CVE-2026-96404

The Gitea web installer is vulnerable to an authentication bypass when accessed against a database containing existing users (e.g., after INSTALL_LOCK is set to false). By submitting the install form with a username matching an existing administrator account, an attacker can obtain an authenticat...

Arbitrary File Deletion Vulnerability in Xianqi Kindergarten Online Management System

Shanxi Xianqi Technology Co., Ltd. is a high-tech enterprise integrating research and development, production, sales and service of hardware and software. The first kindergarten online management system there are arbitrary file deletion vulnerability, attackers can use this vulnerability to delet...