CVE-2026-105172

A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Performing a manipulation of the argument User results in sql injection. The attack may be initiated remotely. The exploit is now public and may ...

CVE-2026-105172 itsourcecode Online Admission System login1.php sql injection

A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Performing a manipulation of the argument User results in sql injection. The attack may be initiated remotely. The exploit is now public and may ...

EUVD-2026-92152

A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Performing a manipulation of the argument User results in sql injection. The attack may be initiated remotely. The exploit is now public and may ...

CVE-2026-105172 itsourcecode Online Admission System login1.php sql injection

A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Performing a manipulation of the argument User results in sql injection. The attack may be initiated remotely. The exploit is now public and may ...

CVE-2026-105172

The itsourcecode Online Admission System 1.0 is vulnerable to a SQL injection vulnerability in the /login1.php file. An attacker can initiate this attack remotely by manipulating the User argument. The provided documents indicate that the exploit is public and may be used, though specific remedia...

CVE-2026-77226: Incorrect Authorization

Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's first-run setup endpoint, where SetupResource incorrectly determines setup availability by counting only direct members of the camunda-admin group rather than recognizing all configured...

EUVD-2026-92467

ApiAdmin v.5.0 and before is vulnerable to SQL Injection in the user-list endpoint GET /admin/User/getUsers via the gid parameter...

PT-2026-106016

Name of the Vulnerable Software and Affected Versions ApiAdmin versions prior to 5.1 Description SQL Injection occurs in the user-list endpoint "/admin/User/getUsers" through the gid parameter. SQL Injection is a technique where malicious SQL statements are inserted into entry fields for executio...

CVE-2026-88397

The software ApiAdmin version 5.0 and before is vulnerable to SQL Injection (CWE-89) within the user-list endpoint. The vulnerability is located in the GET /admin/User/getUsers functionality and is triggered via the gid parameter. An attacker could potentially exploit this to perform unauthorized...

PT-2026-104676

A vulnerability was determined in Jeebase 0.0.1. This vulnerability affects the function updateUser of the file /user/update/info of the component UserService. Executing a manipulation of the argument user/tempUser can lead to dynamically-determined object attributes. The attack can be executed...

PT-2026-104661

A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Performing a manipulation of the argument User results in sql injection. The attack may be initiated remotely. The exploit is now public and may ...

PT-2026-104706

Name of the Vulnerable Software and Affected Versions MediaTek MT2718 affected versions not specified Description A missing bounds check in vdec allows for an out-of-bounds write. This condition could enable remote escalation of privilege without requiring additional execution privileges, althoug...

CVE-2026-104890: Unrestricted Upload of File with Dangerous Type

Kunstmaan CMS is an open source content management system based on the Symfony framework. Prior to 7.3.2, src/Kunstmaan/MediaBundle/Helper/File/FileHandler.php performs the blacklistedextensions check case-sensitively in FileHandler::getFilePath and lowercases the stored extension afterward. An...

PT-2026-106097

Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through 2.0.2...

PT-2026-106183

Name of the Vulnerable Software and Affected Versions Ghost versions 4.22.0 through 6.64.0 Description SVG media thumbnails and SVG images uploaded with a non-SVG file extension are stored without sanitization. This allows staff users, including those with Contributor roles, to host malicious...

PT-2026-106177

Name of the Vulnerable Software and Affected Versions Ghost versions 6.34.0 through 6.66.0 Description Embed cards in the editor allow staff users, including those with Contributor roles, to bypass protections against stored cross-site scripting XSS. This occurs when scripts are stored in post...

PT-2026-106239

Name of the Vulnerable Software and Affected Versions Camunda versions 7.24.0 through 7.24.14 Description An incorrect authorization issue exists in the Admin web application's first-run setup endpoint. The SetupResource incorrectly determines if the setup process is available by counting only...

PT-2026-106138

Name of the Vulnerable Software and Affected Versions Ghost versions 6.56.0 through 6.66.0 Description A vulnerability exists in the SVG handling of an image processing library bundled with the Ghost content management system. A staff user with Contributor permissions or higher can create a...

PT-2026-106071

Improper Access Control vulnerability in WP User Manager WP User Manager wp-user-manager allows Privilege Abuse.This issue affects WP User Manager: from n/a through 2.9.20...

PT-2026-106029

Name of the Vulnerable Software and Affected Versions Plane versions prior to 1.4.0 Description WorkspaceOwnerPermission does not verify if the is active variable is set to True when validating if a user is a workspace owner. This allows a deactivated user to maintain authorization and retain...