CVE-2026-107706

Dolibarr ERP CRM before 24.0.2 contains an incorrect authorization vulnerability in htdocs/core/ajax/updateextrafield.php that checks only read permission before writing extrafield values. Authenticated users with read-only access can POST objectType, objectId, field and value parameters to...

CVE-2026-107782

System Informer versions prior to 4.0.26241.138 are vulnerable to an incorrect authorization vulnerability in the phsvc helper. This flaw allows local attackers to access privileged APIs by connecting via any Authenticode-signed process. Specifically, an attacker can load code into a Microsoft-si...

CVE-2026-107782 System Informer before 4.0.26241.138 Incorrect Authorization in phsvc ALPC Port

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

EUVD-2026-95260

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

CVE-2026-107781 Dromara Skyeye Unauthenticated SSRF and File Overwrite via editUploadOfficeFileById

Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a server-side request forgery and missing authorization vulnerability in the OnlyOffice save callback editUploadOfficeFileById. Unauthenticated attackers can supply arbitrary url and key parameters to make the server...

EUVD-2026-95259

Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a server-side request forgery and missing authorization vulnerability in the OnlyOffice save callback editUploadOfficeFileById. Unauthenticated attackers can supply arbitrary url and key parameters to make the server...

CVE-2026-107782 System Informer before 4.0.26241.138 Incorrect Authorization in phsvc ALPC Port

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

CVE-2026-107706 Dolibarr before 24.0.2 Incorrect Authorization via updateextrafield.php

Dolibarr ERP CRM before 24.0.2 contains an incorrect authorization vulnerability in htdocs/core/ajax/updateextrafield.php that checks only read permission before writing extrafield values. Authenticated users with read-only access can POST objectType, objectId, field and value parameters to...

CVE-2026-107706 Dolibarr before 24.0.2 Incorrect Authorization via updateextrafield.php

Dolibarr ERP CRM before 24.0.2 contains an incorrect authorization vulnerability in htdocs/core/ajax/updateextrafield.php that checks only read permission before writing extrafield values. Authenticated users with read-only access can POST objectType, objectId, field and value parameters to...

CVE-2026-107706

Dolibarr ERP CRM versions before 24.0.2 are vulnerable to an incorrect authorization flaw in htdocs/core/ajax/updateextrafield.php. The root cause is that the application only verifies read permissions before allowing the writing of extrafield values. Consequently, authenticated users with only r...

EUVD-2026-95209

Dolibarr ERP CRM before 24.0.2 contains an incorrect authorization vulnerability in htdocs/core/ajax/updateextrafield.php that checks only read permission before writing extrafield values. Authenticated users with read-only access can POST objectType, objectId, field and value parameters to...

inference-gateway-PoC

inference-gateway: Sicherheitshinweis | ---|--- Forscher| Dostxodjayev Abdullox @squeeze440 Advisory| GHSA-5293-fcm6-fh8v CVE| CVE-2026-87009 CVSS 3.1| 5.4 Mittel — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L Schwachstelle| CWE-352, CWE-306, CWE-346 Status| Behoben in v0.46.0 Zusammenfassung :...

CVE-2026-83991-writeup-and-poc

The File Said No. Cloud Files Said Supersede. CVE-2026-83991 is a Windows Cloud Files tampering vulnerability whose published affected range begins with Windows 10 version 1809, almost eight years before the September 2026 fix. I asked Windows to open a file for writing. It answered...

CVE-2026-73320

CVE-2026-73320: Unauthenticated unfurl result disclosure XenForo before 2.3.13 exposes pending rich-link previews through an unauthenticated endpoint keyed by predictable integer IDs. What happens unfurl.php accepts a POST containing global UnfurlResult IDs, loads those rows, and returns rendered...

vault-cve-2026-5006-audit

CVE-2026-5006 Toolkit HCSEC-2026-32 Zwei Werkzeuge zur Bearbeitung der Vault-Schwachstelle durch Slash-Injection in templated Policies: eine interaktive Schritt-für-Schritt-Anleitung zur Erklärung und Eingrenzung des Problems sowie ein Audit-Skript, das einen laufenden Cluster prüft und die...

CVE-2026-4692-trust-me-im-in-rdm

CVE-2026-4692 — Inhaltsprozesse können sich selbst als RDM deklarieren Proof of Concept für eine fehlende Autorisierungsprüfung bei der Synchronisierung des BrowsingContext-Felds: Ein kompromittierter Inhaltsprozess fälscht eine PContent::CommitBrowsingContextTransaction-Nachricht, die InRDMPane ...

cve-2026-41940-tool

🚀 CVE-2026-41940 – Exploitationstool für die Auth-Bypass-Schwachstelle in cPanel & WHM / WP Squared Ein umfassendes Python-Tool zum Erkennen , Massen-Scannen und Ausnutzen der kritischen Authentifizierungs-Bypass-Schwachstelle CVE-2026-41940 in cPanel & WHM und WP Squared. Das Tool kombiniert...

WSGoat

WebSocket GOAT Eine absichtlich verwundbare, Dockerisierte WebSocket-Anwendung, die zum Erlernen und Üben von WebSocket-Sicherheitstests in einer kontrollierten Umgebung entwickelt wurde. Das Labor implementiert eine realistische Webanwendung mit Authentifizierung, privatem Messaging,...

CVE-2026-5724

Zusammenfassung Der Temporal-Frontend-Dienst erzwingt keine Authentifizierung bei Streaming-gRPC-RPCs. Die Streaming-Interceptor-Kette lässt den Autorisierungs-Interceptor aus, sodass nicht authentifizierte Aufrufer auf AdminService/StreamWorkflowReplicationMessages zugreifen können, einen...

CVE-2026-25939-SCADA-FUXA-Unauthenticated-Remote-Arbitrary

👤 Autor Mohammed Idrees Banyamer Sicherheitsforscher 📌 Überblick Dieses Repository enthält einen Proof-of-Concept-Exploit PoC für CVE-2026-25939 , eine kritische Schwachstelle zur Umgehung der Autorisierung in FUXA Open-Source-SCADA/ICS-Software. Die Schwachstelle ermöglicht nicht authentifiziert...