PT-2026-106166

Name of the Vulnerable Software and Affected Versions Bacularis versions 5.4.0 through 6.5.1 Description Cross Site Scripting XSS occurs in the Organization name field. XSS is a flaw that allows an attacker to inject malicious scripts into web pages viewed by other users. Recommendations Update...

PT-2026-104774

DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-controlled .so file instead of the expected legitimate module. The loading mechanism relies on a predictable module name without adequately verifying the file’s origin or integrity. A...

PT-2026-104763

Missing Authorization vulnerability in Jeroen Peters Name Directory name-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Name Directory: from n/a through 1.34.2...

CVE-2026-95165: Undefined Security Weakness

Bacularis 5.4.0 - 6.5.1 is vulnerable to Cross Site Scripting XSS in the Organization name field...

CVE-2026-104397: Missing Authorization

Missing Authorization vulnerability in Jeroen Peters Name Directory name-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Name Directory: from n/a through 1.34.2...

CVE-2026-105229: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...

CVE-2026-71889

In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer - org.bouncycastle.pkix.jcajce.PKIXCertPathReviewer nor the legacy org.bouncycastle.x509.PKIXCertPathReviewer - applied X.509 name constraints to the end-entity certificate. checkNameConstraints walked the path with a loo...

PT-2026-104663

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function project create of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument project name leads to path traversal. Remote exploitation of the attack is...

PT-2026-106022

Plane is an open-source project management tool. Prior to 1.4.0, the unauthenticated public issues endpoint accepts group by and sub group by query parameters and passes them without an allowlist to grouped paginators, where they are used as ORM field names by Ffield, .valuesfield, .order byfield...

CVE-2026-95165

Bacularis versions 5.4.0 through 6.5.1 are vulnerable to a Cross-Site Scripting (XSS) vulnerability. The flaw exists specifically within the Organization name field . No information regarding the root cause, practical impact, remediation, or available exploits is provided in the documents.

CVE-2026-95165

Bacularis 5.4.0 - 6.5.1 is vulnerable to Cross Site Scripting XSS in the Organization name field...

PT-2026-106232

Name of the Vulnerable Software and Affected Versions Langflow versions prior to 1.10.3 langflow-base versions prior to 0.10.3 lfx versions prior to 1.10.3 Description An issue exists in the MCP stdio transport where the software executes commands and arguments provided in an MCP server...

CVE-2026-105171: Authorization Bypass Through User-Controlled Key

A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by this vulnerability is an unknown functionality of the file admin/admin.php of the component Role Attribute Handler...

CVE-2026-105171 kishor-23 food-waste-management-system Role Attribute admin.php authorization

A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by this vulnerability is an unknown functionality of the file admin/admin.php of the component Role Attribute Handler...

CVE-2026-105171 kishor-23 food-waste-management-system Role Attribute admin.php authorization

A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by this vulnerability is an unknown functionality of the file admin/admin.php of the component Role Attribute Handler...

CVE-2023-5024

عنوان الثغرة: PLANNO 23.04.04 تعليق عبر الموقع XSS مؤلف الثغرة: Angel Metz AKA PH03N1XSP الصفحة الرئيسية للبائع: Planno رابط البرنامج: GitHub - PlanningBiblio الإصدار: alert1; 4. بمجرد إدخال النص البرمجي، تابع للحصول على XSS المنعكسة. المسار الثاني 1. قم بتسجيل الدخول باستخدام بيانات اعتمادك. 2...

CVE-2026-4480

🚨 CVE-2026-4480 - تنفيذ تعليمات عن بُعد حرج في نظام الطباعة في Samba تنفيذ تعليمات عن بُعد RCE ثغرة حقن أوامر الطباعة في Samba "لا ينبغي أبدًا أن يصبح اسم مهمة الطباعة أمرًا شيل." 📖 نظرة عامة CVE-2026-4480 هي ثغرة حقن أوامر حرجة تؤثر على نظام الطباعة في Samba. تحت تكوينات معينة، قد يقوم Samba...

CVE-2024-4439

CVE-2024-4439 CVE-2024-4439 docker and poc إعداد بيئة الاختبار بعد تشغيل حاوية docker، لا تزال هناك بعض الإعدادات المطلوبة قم بزيارة 127.0.0.1:8080، وبعد إكمال الإعداد في لوحة التحكم - المظهر - السمات، حدد سمة، ثم قم بتخصيصها وإعدادها انتقل إلى التصميم - القوالب - المقالة الفردية اختر الصورة...

CVE-2023-49540

CVE-2023-49540 Book Store Management System v1.0 - ثغرة البرمجة النصية عبر المواقع XSS في /index.php/history - الحقل المعرض: "اسم العميل". الوصف : تم اكتشاف أن نظام إدارة المكتبات الإصدار 1.0 يحتوي على ثغرة برمجة نصية عبر المواقع XSS في /bsmsci/index.php/history. يتم إدخال الحمولة في حقل "اسم...

CVE-2023-49984

CVE-2023-49984 School Fees Management System v1.0 - ثغرة برمجة عبر المواقع XSS في حقل/معلمة "name" في "/management/settings" الوصف : توجد ثغرة برمجة عبر المواقع XSS في المكون "/management/settings" في نظام إدارة الرسوم المدرسية الإصدار v1.0، تتيح للمهاجمين تنفيذ نصوص برمجية تعسفية أو كود HTML عبر...