CVE-2026-105146 Comsenz Discuz! Admin Medal Moderation mod.php modmedalsubmit sql injection

A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected by this issue is the function modmedalsubmit of the file upload/source/app/admin/child/medals/mod.php of the component Admin Medal Moderation. The manipulation of the argument delete results in sql...

CVE-2026-105146

A SQL injection vulnerability exists in Comsenz Discuz! versions X5.0-20260801 , X5.0-20260820 , and X5.0-20260910 . The flaw is located within the modmedalsubmit function of the upload/source/app/admin/child/medals/mod.php file in the Admin Medal Moderation component. Specifically, manipulating ...

0-click-RCE-Exploit-for-CVE-2024-51793

CVE-2024-51793 / 0-क्लिक RCE एक्सप्लॉइट लेखक: Joshua Provoste https://x.com/JoshuaProvoste/status/1858668072279626138 इस रिपॉज़िटरी में CVE-2024-51793 के लिए एक प्रूफ-ऑफ-कॉन्सेप्ट एक्सप्लॉइट है, जो एक संवेदनशील WordPress प्लगइन में बिना प्रमाणीकरण के मनमाना फ़ाइल अपलोड करने की भेद्यता है, जो रिमो...

CVE-2024-24401

भेद्यता रिपोर्ट CVE खोजा गया KALI LINUX पर चलाने के लिए डिज़ाइन किया गया नोट्स Nagios ने सभी हालिया डाउनलोडों में संस्करण 2024R1.0.1 को पैच कर दिया है। यह निर्धारित करने के लिए कि कोई लक्ष्य भेद्य है या नहीं, सुनिश्चित करें कि वे 2024R1.0.1 के पुराने डाउनलोड का उपयोग कर रहे हैं। अद्यतन स्क्रिप्ट ...

CVE-2026-8732

⚔️ CVE-2026-8732 WP Maps Pro ≤ 6.1.0 — बिना प्रमाणीकरण के विशेषाधिकार वृद्धि 8-चरण स्वचालित शोषण | मल्टीप्रोसेसिंग + AsyncIO | सत्यापित व्यवस्थापक निर्माण 🎯 कमजोरी के बारे में WordPress प्लगइन WP Maps Pro संस्करण ≤ 6.1.0 में बिना प्रमाणीकरण के विशेषाधिकार वृद्धि की कमजोरी है। कोई भी बिना...

CVE-2025-14440

CVE-2025-14440 JAY Login & Register -id...

CVE-2026-104119

The Simple Shopping Cart WordPress plugin before 5.2.6 does not escape some of its settings field values before outputting them on an admin settings page, allowing high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks, which is notably impactful on multisite...

EUVD-2026-92073

The Simple Shopping Cart WordPress plugin before 5.2.6 does not escape some of its settings field values before outputting them on an admin settings page, allowing high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks, which is notably impactful on multisite...

CVE-2026-104119 Simple Shopping Cart < 5.2.6 - Admin+ Stored XSS via PayPal API Credentials

The Simple Shopping Cart WordPress plugin before 5.2.6 does not escape some of its settings field values before outputting them on an admin settings page, allowing high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks, which is notably impactful on multisite...

CVE-2026-104119 Simple Shopping Cart < 5.2.6 - Admin+ Stored XSS via PayPal API Credentials

The Simple Shopping Cart WordPress plugin before 5.2.6 does not escape some of its settings field values before outputting them on an admin settings page, allowing high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks, which is notably impactful on multisite...

WordPress Simple Shopping Cart plugin < 5.2.6 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Simple Shopping Cart versions 5.2.6...

Palo Alto Expedition - Admin Account Takeover

Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. id: CVE-2024-5910 info: name: Palo Alto Expedition - Admin Account Takeover author: johnk3r severity: critical...

MantisBT <=2.30 - Arbitrary Password Reset/Admin Access

MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirmhash value to verify.php. id: CVE-2017-7615 THIS TEMPLATE IS ONLY FOR DETECTING To carry out further attacks, please see reference2 below. This template works by guessing user ID. MantisBT...

PT-2026-104660

A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by this vulnerability is an unknown functionality of the file admin/admin.php of the component Role Attribute Handler...

PT-2026-104657

A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file admin/admin.php of the component Order Assignment Block. The manipulation of the argument order...

PT-2026-104621

A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected by this issue is the function modmedalsubmit of the file upload/source/app/admin/child/medals/mod.php of the component Admin Medal Moderation. The manipulation of the argument delete results in sql...

PT-2026-104653

A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file admin/donate.php. Executing a manipulation of the argument location can lead to sql...

CVE-2026-105167: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file admin/donate.php. Executing a manipulation of the argument location can lead to sql...

CVE-2026-105146: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected by this issue is the function modmedalsubmit of the file upload/source/app/admin/child/medals/mod.php of the component Admin Medal Moderation. The manipulation of the argument delete results in sql...

CVE-2026-105126: Improper Privilege Management

LaraDashboard before 1.4.8 contains an improper privilege management vulnerability that allows authenticated Admin users to escalate to Superadmin by editing or renaming roles. Attackers with role.edit can rename their role to Superadmin or grant user.loginas permissions to take over accounts and...