CVE-2026-107706

Dolibarr ERP CRM before 24.0.2 contains an incorrect authorization vulnerability in htdocs/core/ajax/updateextrafield.php that checks only read permission before writing extrafield values. Authenticated users with read-only access can POST objectType, objectId, field and value parameters to...

CVE-2026-107782

System Informer versions prior to 4.0.26241.138 are vulnerable to an incorrect authorization vulnerability in the phsvc helper. This flaw allows local attackers to access privileged APIs by connecting via any Authenticode-signed process. Specifically, an attacker can load code into a Microsoft-si...

EUVD-2026-95259

Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a server-side request forgery and missing authorization vulnerability in the OnlyOffice save callback editUploadOfficeFileById. Unauthenticated attackers can supply arbitrary url and key parameters to make the server...

CVE-2026-107782 System Informer before 4.0.26241.138 Incorrect Authorization in phsvc ALPC Port

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

EUVD-2026-95260

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

CVE-2026-107781 Dromara Skyeye Unauthenticated SSRF and File Overwrite via editUploadOfficeFileById

Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a server-side request forgery and missing authorization vulnerability in the OnlyOffice save callback editUploadOfficeFileById. Unauthenticated attackers can supply arbitrary url and key parameters to make the server...

CVE-2026-107782 System Informer before 4.0.26241.138 Incorrect Authorization in phsvc ALPC Port

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

CVE-2026-107706 Dolibarr before 24.0.2 Incorrect Authorization via updateextrafield.php

Dolibarr ERP CRM before 24.0.2 contains an incorrect authorization vulnerability in htdocs/core/ajax/updateextrafield.php that checks only read permission before writing extrafield values. Authenticated users with read-only access can POST objectType, objectId, field and value parameters to...

CVE-2026-107706 Dolibarr before 24.0.2 Incorrect Authorization via updateextrafield.php

Dolibarr ERP CRM before 24.0.2 contains an incorrect authorization vulnerability in htdocs/core/ajax/updateextrafield.php that checks only read permission before writing extrafield values. Authenticated users with read-only access can POST objectType, objectId, field and value parameters to...

CVE-2026-107706

Dolibarr ERP CRM versions before 24.0.2 are vulnerable to an incorrect authorization flaw in htdocs/core/ajax/updateextrafield.php. The root cause is that the application only verifies read permissions before allowing the writing of extrafield values. Consequently, authenticated users with only r...

EUVD-2026-95209

Dolibarr ERP CRM before 24.0.2 contains an incorrect authorization vulnerability in htdocs/core/ajax/updateextrafield.php that checks only read permission before writing extrafield values. Authenticated users with read-only access can POST objectType, objectId, field and value parameters to...

inference-gateway-PoC

inference-gateway: avviso di sicurezza | ---|--- Ricercatore| Dostxodjayev Abdullox @squeeze440 Avviso| GHSA-5293-fcm6-fh8v CVE| CVE-2026-87009 CVSS 3.1| 5.4 Medio — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L Debolezza| CWE-352, CWE-306, CWE-346 Stato| Risolto in v0.46.0 Riepilogo :...

CVE-2026-83991-writeup-and-poc

The File Said No. Cloud Files Said Supersede. CVE-2026-83991 is a Windows Cloud Files tampering vulnerability whose published affected range begins with Windows 10 version 1809, almost eight years before the September 2026 fix. I asked Windows to open a file for writing. It answered...

CVE-2026-73320

CVE-2026-73320: Unauthenticated unfurl result disclosure XenForo before 2.3.13 exposes pending rich-link previews through an unauthenticated endpoint keyed by predictable integer IDs. What happens unfurl.php accepts a POST containing global UnfurlResult IDs, loads those rows, and returns rendered...

vault-cve-2026-5006-audit

Toolkit CVE-2026-5006 HCSEC-2026-32 Due strumenti per affrontare la vulnerabilità di slash-injection nelle policy templatizzate di Vault: una guida interattiva per spiegare e valutare il problema, e uno script di audit che controlla un cluster live e scrive i risultati in Markdown...

CVE-2026-4692-trust-me-im-in-rdm

CVE-2026-4692 — i processi di contenuto possono dichiararsi in RDM Proof of concept per un controllo di autorizzazione mancante sulla sincronizzazione del campo BrowsingContext: un processo di contenuto compromesso falsifica un messaggio PContent::CommitBrowsingContextTransaction impostando...

cve-2026-41940-tool

🚀 CVE-2026-41940 – Strumento di Sfruttamento del Bypass di Autenticazione cPanel & WHM / WP Squared Un'utility Python completa per rilevare , scansionare in massa e sfruttare la vulnerabilità critica di bypass dell'autenticazione CVE-2026-41940 in cPanel & WHM e WP Squared. Lo strumento combina...

WSGoat

WebSocket GOAT Un'applicazione WebSocket Dockerizzata, deliberatamente vulnerabile, progettata per apprendere e praticare il test di sicurezza WebSocket in un ambiente controllato. Il laboratorio implementa un'applicazione web realistica con autenticazione, messaggistica privata, profili utente e...

CVE-2026-5724

Riepilogo Il servizio frontend di Temporal non applica l'autenticazione sulle RPC gRPC in streaming. La catena di interceptor per lo streaming omette l'interceptor di autorizzazione, consentendo a chiamanti non autenticati di accedere a AdminService/StreamWorkflowReplicationMessages, un endpoint...

CVE-2026-25939-SCADA-FUXA-Unauthenticated-Remote-Arbitrary

👤 Autore Mohammed Idrees Banyamer Ricercatore di Sicurezza 📌 Panoramica Questo repository contiene un exploit Proof-of-Concept PoC per CVE-2026-25939 , una vulnerabilità critica di bypass dell'autorizzazione in FUXA software SCADA/ICS open-source. La vulnerabilità consente ad attaccanti remoti no...