https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-26T06:56:34.081007+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-267270 EUVD-2026-267270 2026-10-26T06:56:34.083226+00:00 EUVD-2026-267270 https://cve.radiocsirt.org/vuln/fkie_cve-2025-10878 fkie_cve-2025-10878 2026-10-26T06:56:34.083294+00:00

A SQL injection vulnerability exists in the login functionality of Fikir Odalari AdminPando 1.0.1 before 2026-01-26. The username and password parameters are vulnerable to SQL injection, allowing unauthenticated attackers to bypass authentication completely. Successful exploitation grants full administrative access to the application, including the ability to manipulate the public-facing website content (HTML/DOM manipulation).

 https://cve.radiocsirt.org/vuln/ghsa-66jj-x34q-v9c3 GHSA-66jj-x34q-v9c3 2026-10-26T06:56:34.083324+00:00

A SQL injection vulnerability exists in the login functionality of Fikir Odalari AdminPando 1.0.1 before 2026-01-26. The username and password parameters are vulnerable to SQL injection, allowing unauthenticated attackers to bypass authentication completely. Successful exploitation grants full administrative access to the application, including the ability to manipulate the public-facing website content (HTML/DOM manipulation).