İbrahim Yi̇ği̇tsoy

Incorrect Authorization vulnerability in E-Kalite Software Hardware Engineering Design and Internet Services Industry and Trade Ltd. Co. Turboard FOR-S allows Privilege Escalation. This issue affects Turboard FOR-S: from 7.01.2026 before 18.02.2026.

**Name of the Vulnerable Software and Affected Versions** Universal Software Inc. FlexCity/Kiosk versions prior to 1.0.36 **Description** A flaw exists in Universal Software Inc. FlexCity/Kiosk that allows accessing functionality not properly constrained by Access Control Lists (ACLs), potentially leading to privilege escalation. The issue stems from privileges defined with unsafe actions and missing authentication for a critical function. **Recommendations** Update FlexCity/Kiosk to version 1.0.36 or later.

**Name of the Vulnerable Software and Affected Versions** Universal Software Inc. FlexCity/Kiosk versions prior to 1.0.36 **Description** An authentication bypass issue exists in Universal Software Inc. FlexCity/Kiosk, potentially allowing privilege escalation. The issue involves using an alternate path or channel to bypass normal authentication procedures. **Recommendations** Update FlexCity/Kiosk to version 1.0.36 or later.

**Name of the Vulnerable Software and Affected Versions** Universal Software Inc. FlexCity/Kiosk versions prior to 1.0.36 **Description** An authorization bypass exists in FlexCity/Kiosk due to exploitation of trusted identifiers through a user-controlled key. This allows unauthorized access. **Recommendations** Update FlexCity/Kiosk to version 1.0.36 or later.

**Name of the Vulnerable Software and Affected Versions** StarCities versions prior to 1.1.61 **Description** StarCities is subject to Reflected Cross-site Scripting (XSS), a condition where improper neutralization of input during web page generation allows an attacker to execute malicious scripts in the victim's browser. **Recommendations** Update to version 1.1.61.

**Name of the Vulnerable Software and Affected Versions** Premierturk Information Technologies Inc. Excavation Management Information System versions prior to 10.2025.01 **Description** A condition exists that allows exposure of private personal information to an unauthorized actor and enables functionalities such as footprinting and functionality misuse. The issue grants unauthenticated, remote access to sensitive files. **Recommendations** Update to a version prior to 10.2025.01.

**Name of the Vulnerable Software and Affected Versions** Saysis Web Portal versions 3.1.9 through 3.2.0 **Description** A Path Traversal issue exists in Saysis Web Portal. The issue allows unauthorized access due to improper limitation of a pathname to a restricted directory. **Recommendations** Update to version 3.2.1.