CVE-2025-7784 Org.keycloak/keycloak-services: privilege escalation in keycloak admin console (fgapv2 enabled)

A flaw was found in the Keycloak identity and access management system when Fine-Grained Admin PermissionsFGAPv2 are enabled. An administrative user with the manage-users role can escalate their privileges to realm-admin due to improper privilege enforcement. This vulnerability allows unauthorize...

SUSE CVE-2023-3676

A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes...

Affiliate Me Version 5.0.1 - SQL Injection Vulnerability

Exploit Title: Affiliate Me Version 5.0.1 - SQL Injection CVSS 3.1: 6.4 Medium CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N Tactic: Initial Access TA0001 Technique: Exploit Public-Facing Application T1190 Application Name: Affiliate Me Application Version: 5.0.1 Vendor:...

CVE-2020-21119

SQL Injection vulnerability in Kliqqi-CMS 2.0.2 in admin/adminupdatemodulewidgets.php in recordIDValue parameter, allows attackers to gain escalated privileges and execute arbitrary code...