CVE-2026-71620: Unrestricted Upload of File with Dangerous Type

File Upload vulnerability in Zhao-github ApiAdmin v.5.0.1 allows a remote attacker to execute arbitrary code via a crafted .php file...

CVE-2026-71620

A File Upload vulnerability exists in Zhao-github ApiAdmin v.5.0.1 , allowing a remote attacker to execute arbitrary code . The root cause is the ability to upload a crafted .php file to the system. The provided documents do not specify a remediation or a direct link to a functional exploit.

PT-2026-86237

Name of the Vulnerable Software and Affected Versions ApiAdmin version 5.0.1 Description A file upload flaw allows a remote attacker to execute arbitrary code by uploading a specially crafted .php file. Recommendations At the moment, there is no information about a newer version that contains a f...

CVE-2026-71622

A SQL injection vulnerability exists in Zhao-github APiAdmin v.5.0.1 . This flaw allows a remote attacker to obtain sensitive information by exploiting the User.php component. No specific remediation or exploit details are provided in the documents.

CVE-2026-71622: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Zhao-github APiAdmin v.5.0.1 allows a remote attacker to obtain sensitive information via the User.php component...

CVE-2026-71620

File Upload vulnerability in Zhao-github ApiAdmin v.5.0.1 allows a remote attacker to execute arbitrary code via a crafted .php file...

GHSA-QVQ9-HQ6P-V378

creationtimestamp| type| source ---|---|--- 2026-09-03 23:31:29+00:00| seen| https://gist.github.com/alon710/6d84a03746a753dea4049dd4a31c2df7 2026-09-04 00:00:27+00:00| seen| https://gist.github.com/alon710/6d84a03746a753dea4049dd4a31c2df7...

CVE-2026-72803

creationtimestamp| type| source ---|---|--- 2026-09-03 23:31:29+00:00| seen| https://gist.github.com/alon710/6d84a03746a753dea4049dd4a31c2df7 2026-09-04 00:00:27+00:00| seen| https://gist.github.com/alon710/6d84a03746a753dea4049dd4a31c2df7 2026-09-04 00:35:10+00:00| published-proof-of-concept|...

CVE-2026-63669

creationtimestamp| type| source ---|---|--- 2026-09-03 22:35:23+00:00| published-proof-of-concept| https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-wr5r-wqp2-x4fh...

CVE-2026-63670

creationtimestamp| type| source ---|---|--- 2026-09-03 22:35:20+00:00| published-proof-of-concept| https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-jxwj-j7wr-gfrw...

CVE-2026-71429

creationtimestamp| type| source ---|---|--- 2026-09-03 22:35:16+00:00| published-proof-of-concept| https://github.com/uhop/stream-json/security/advisories/GHSA-528h-pc64-c93x...

GHSA-7J72-F6WG-CXW6

creationtimestamp| type| source ---|---|--- 2026-09-03 22:31:26+00:00| seen| https://gist.github.com/alon710/4d2d0e14cc9fbf8c2c4ec8fd41b0edff...

GHSA-82X6-Q7MM-W9CF

creationtimestamp| type| source ---|---|--- 2026-09-03 21:05:03+00:00| seen| https://gist.github.com/alon710/aeca88a9cadc2c33877b37b541208edc...

CVE-2026-73222

creationtimestamp| type| source ---|---|--- 2026-09-03 20:35:04+00:00| published-proof-of-concept| https://github.com/davila7/claude-code-templates/security/advisories/GHSA-79wm-x847-7cvg...

GHSA-XVG9-69GF-FJRF

creationtimestamp| type| source ---|---|--- 2026-09-03 20:32:54+00:00| seen| https://gist.github.com/alon710/b48a4802ab7de78f3b7bc06aac45d10c...

CVE-2026-73295

creationtimestamp| type| source ---|---|--- 2026-09-03 20:32:54+00:00| seen| https://gist.github.com/alon710/b48a4802ab7de78f3b7bc06aac45d10c...

GHSA-5JGF-P345-68V8 vulnerabilities

Vulnerabilities for packages: tileserver-gl, opensearch-dashboards, prism, vitess, yaml-language-server...

GHSA-6GMQ-8VP8-GCM6

creationtimestamp| type| source ---|---|--- 2026-09-03 19:51:58+00:00| seen| https://gist.github.com/konard/414f6d2acf125677f96485ac80cd6a3e 2026-09-03 20:01:12+00:00| seen| https://gist.github.com/konard/dd2953c7e8aaafb583eb5ca63d192c70...

GHSA-2H9G-J24R-H63G

creationtimestamp| type| source ---|---|--- 2026-09-03 19:32:48+00:00| seen| https://gist.github.com/alon710/ca4d0cdb0c789284d2fa209ad1644bb6...

GHSA-52CP-R559-CP3M

creationtimestamp| type| source ---|---|--- 2026-09-03 19:24:25+00:00| seen| https://gist.github.com/konard/05d19a59942ef51514e30abcc55dbc13 2026-09-03 20:24:24+00:00| seen| https://gist.github.com/konard/89a0a4cf1c31638c67d192f7a8f1aa7d...