CVE-2026-103314

A flaw exists in Red Hat Advanced Cluster Security for Kubernetes (RHACS) where the Central SAML authentication ACS endpoint fails to retain used SAML assertion or response identifiers. This allows an attacker to perform a replay attack by submitting a valid, unexpired signed SAML response multip...

CVE-2026-103314 Stackrox: stackrox: saml response replay allows multiple central authentication tokens

A flaw was found in Red Hat Advanced Cluster Security for Kubernetes RHACS. The Central SAML authentication ACS endpoint does not retain used SAML assertion or response identifiers to prevent replay. An attacker who obtains a valid, unexpired signed SAML response can submit it multiple times and...

CVE-2026-103314

A flaw was found in Red Hat Advanced Cluster Security for Kubernetes RHACS. The Central SAML authentication ACS endpoint does not retain used SAML assertion or response identifiers to prevent replay. An attacker who obtains a valid, unexpired signed SAML response can submit it multiple times and...

teatime

=========================================== Teatime - A Blockchain RPC Attack Framework .. image:: https://img.shields.io/pypi/v/teatime.svg :target: https://pypi.python.org/pypi/teatime .. image:: https://img.shields.io/travis/dmuhs/teatime.svg :target: https://travis-ci.com/dmuhs/teatime...

autoguardrails

autoguardrails Open source by Santander AI Lab. An LLM / AI-safety guardrail research library / evaluation harness autoresearch-style: it searches over a single mutable policy.md surface to minimize attack success rate ASR against a fixed evaluation suite, with a benign-pass floor. Part of...

Check-AAD-Connect-for-CVE-2021-36949-vulnerability

The script will check if your Azure AD Connect is running a version affected by the vulnerability described in CVE-2021-36949. Affected versions are 1.6.4.0 and 2.0.3.0. Run the script on the server that hosts the AAD Connect installation. The script also checks if the auto-upgrade feature is...

RmiTaste

RmiTaste RmiTaste allows security professionals to detect, enumerate, interact and attack RMI services by calling remote methods with gadgets from ysoserial. It also allows to call remote method with specific parameters. Disclaimer RmiTaste was written to aid security professionals in identifying...

CVE-2026-112140 llSourcell Doctor-Dignity chat_module.py _get_lib_module code injection

A vulnerability was found in llSourcell Doctor-Dignity up to 3f2ffb6c892f13b50a708d05900d3227acb40ded. This impacts the function getlibmodule of the file python/mlcchat/chatmodule.py. The manipulation of the argument modellib results in code injection. The attack may be launched remotely. The...

CVE-2026-112140 llSourcell Doctor-Dignity chat_module.py _get_lib_module code injection

A vulnerability was found in llSourcell Doctor-Dignity up to 3f2ffb6c892f13b50a708d05900d3227acb40ded. This impacts the function getlibmodule of the file python/mlcchat/chatmodule.py. The manipulation of the argument modellib results in code injection. The attack may be launched remotely. The...

CVE-2026-112140

A code injection vulnerability exists in llSourcell Doctor-Dignity (up to commit 3f2ffb6c892f13b50a708d05900d3227acb40ded ). The flaw is located in the _get_lib_module function within the python/mlc_chat/chat_module.py file. Specifically, manipulating the model_lib argument allows for remote code...

BruteLoops

BruteLoops A dead simple library providing the foundational logic for efficient password brute force attacks against authentication interfaces. Documentation Documentation can be found here. If you're looking for the old example modules... See BFG. The examples have been offloaded to a distinct...

EUVD-2026-104248

A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown function of the file admindocview.php of the component Administrative Mutation Handler. The manipulation of the argument docid leads to sql...

CVE-2026-112139

A SQL injection vulnerability exists in the Administrative Mutation Handler component of the subhajitkhan online-clinic-management-system (up to commit e9ee77a8827a1446220fa07ee693dc4d9a29a578). The flaw is triggered by manipulating the docid argument within the admindocview.php file. This vulner...

CVE-2026-112139 subhajitkhan online-clinic-management-system Administrative Mutation admindocview.php sql injection

A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown function of the file admindocview.php of the component Administrative Mutation Handler. The manipulation of the argument docid leads to sql...

CVE-2026-112139 subhajitkhan online-clinic-management-system Administrative Mutation admindocview.php sql injection

A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown function of the file admindocview.php of the component Administrative Mutation Handler. The manipulation of the argument docid leads to sql...

CVE-2026-112138 diem-project diem dmCodeEditor actions.class.php join path traversal

A flaw has been found in diem-project diem up to 5.1.3. The impacted element is the function dmOs::join of the file dmFrontPlugin/modules/dmCodeEditor/actions/actions.class.php of the component dmCodeEditor. Executing a manipulation can lead to path traversal. The attack can be launched remotely...

EUVD-2026-104246

A flaw has been found in diem-project diem up to 5.1.3. The impacted element is the function dmOs::join of the file dmFrontPlugin/modules/dmCodeEditor/actions/actions.class.php of the component dmCodeEditor. Executing a manipulation can lead to path traversal. The attack can be launched remotely...

CVE-2026-112138

A path traversal vulnerability exists in diem-project diem up to version 5.1.3 . The flaw is located in the dmOs::join function within the file dmFrontPlugin/modules/dmCodeEditor/actions/actions.class.php of the dmCodeEditor component. An attacker can perform a remote manipulation to achieve path...

CVE-2025-27591

CVE-2025-27591 Below v0.9.0 PoC Privilege Escalation Exploit Disclaimer This exploit is intended for educational purposes only. It is designed to help users understand security vulnerabilities and improve their knowledge of cybersecurity. The author does not condone any illegal activities or...

skill-safety-bench

SkillSafetyBench SkillSafetyBench is a fully materialized benchmark for evaluating safety failures caused by attacks on skill-facing context. Each case keeps the user-facing task ordinary, while the attack is placed in local skills, helper scripts, sidecar files, corpora, templates, or other...