CVE-2026-85401 Dolibarr Legacy File Manager config.inc.php access control

A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functionality of the file htdocs/core/filemanagerdol/connectors/php/config.inc.php of the component Legacy File Manager. Executing a manipulation can lead to improper access controls. The...

EUVD-2026-70872

A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functionality of the file htdocs/core/filemanagerdol/connectors/php/config.inc.php of the component Legacy File Manager. Executing a manipulation can lead to improper access controls. The...

CVE-2026-85401

CVE-2026-85401 affects Dolibarr (versions up to 21.0.4, 22.0.5, and 23.0.3) in the Legacy File Manager component, specifically in the file htdocs/core/filemanagerdol/connectors/php/config.inc.php. The vulnerability is an improper access control flaw exploitable remotely with low privileges, yield...

attack_range

Splunk Attack Range v5 The Splunk Attack Range builds instrumented cloud environments AWS, Azure, GCP, simulates attacks, and forwards data into Splunk for detection development and testing. What it does: Build labs — Deploy a small, production-like lab Splunk, Windows/Linux servers, optional Kal...

GPT_Vuln-analyzer

GPTVuln-analyzer これは、AI を使用して脆弱性分析の正確な結果を生成する方法を示す概念実証アプリケーションであり、すでに非常に便利な ChatGPT をさらに活用することもできます。このアプリケーションは、openai-api、python-nmap、dnsresolver の各 Python モジュールを使用し、GUI 版では customtkinter と tkinter も使用して作成されています。このプロジェクトには CLI と GUI の両方のインターフェースがあり、ネットワーク脆弱性分析、DNS 列挙、サブドメイン列挙を実行できます。 必要条件 Python...

Digital-Privacy

English | 简体中文 이 세상에는 두 종류의 암호가 있습니다: 당신의 여동생이 파일을 읽지 못하게 막는 암호와, 주요 정부가 파일을 읽지 못하게 막는 암호. Bruce Schneier《Applied Cryptography》 내용 : 정보 보호, 오픈소스 인텔리전스OSINT 리소스 저장소 링크 : https://github.com/ffffffff0x/Digital-Privacy 팁 1. 서로 다른 플랫폼에서는 다른 닉네임과 아바타를 사용하세요. 2. 여러 플랫폼에 통일되고 유사한 비밀번호를 사용하지 마세요. 자신만의 비밀번...

badsuccessor

BadSuccessor.py Windows Server 2025 Active Directory 環境における dMSA（委任管理サービスアカウント）権限昇格の脆弱性を悪用するペネトレーションテストツール。 ⚠️ 法的免責事項 このツールは、許可を得たペネトレーションテストおよびセキュリティ研究目的のみで使用すること。 明示的な書面による許可なくシステムに対してこのツールを使用することは、違法かつ非倫理的です。作者は、このツールの誤用または損害について一切の責任を負いません。 ⚠️ 開発ステータスおよび環境テストに関する免責事項 重要：このツールは活発に開発およびテスト中です。...

CVE-2021-43287

CVE-2021-43287 POC: pocsuite -r CVE-2021-43287GoCDfilereadPOCEXP -u url EXP: pocsuite -r CVE-2021-43287GoCDfilereadPOCEXP -u url --attack --command "command" 면책 조항 이 도구는 학습, 연구 및 자체 점검 용도로만 사용됩니다. 불법적인 목적으로 사용해서는 안 됩니다. 이 도구를 사용하여 발생하는 모든 위험은 저와 무관합니다! 면책 조항 이 도구는 학습, 연구 및 자체 점검 용도로만 사용됩니다. 불법적인...

EUVD-2026-70867

A security flaw has been discovered in code-projects Hospital Information System 1.0. Affected by this vulnerability is the function getSinglePresp of the file includes/presp/PrespController.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated...

CVE-2026-85399

A SQL injection vulnerability exists in code-projects Hospital Information System 1.0 , specifically in the function getSinglePresp within the file includes/presp/PrespController.php . An unauthenticated remote attacker can manipulate the ID argument to inject SQL, potentially affecting confident...

CVE-2026-85399 code-projects Hospital Information System PrespController.php getSinglePresp sql injection

A security flaw has been discovered in code-projects Hospital Information System 1.0. Affected by this vulnerability is the function getSinglePresp of the file includes/presp/PrespController.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated...

skill-scanner v2.0.14

Skill Scanner A best-effort security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns. Combines pattern-based detection YAML + YARA, LLM-as-a-judge , and behavioral dataflow analysis to maximize detection coverage of probable threats while...

EDRaser

EDRaser 사용 가이드 EDRaser는 원격 시스템에서 액세스 로그, Windows 이벤트 로그, 데이터베이스 및 기타 파일을 원격으로 삭제하는 강력한 도구입니다. 자동 및 수동 두 가지 작동 모드를 제공합니다. 자동 모드 자동 모드에서 EDRaser는 주어진 IP 주소 공간의 C 클래스를 스캔하여 취약한 시스템을 찾아 자동으로 공격합니다. 자동 모드의 공격은 다음과 같습니다: 웹 서버 로그의 원격 삭제. SysLog 삭제 Linux에서. Windows 애플리케이션 이벤트 로그의 로컬 삭제. Windows 이벤트 로그의 원...

thc-hydra

H Y D R A root@kitploit: c 2001-2023 by van Hauser / THC https://github.com/vanhauser-thc/thc-hydra Many modules were written by David dot Maciejak @ gmail dot com BFG code by Jan Dlabal Licensed under AGPLv3 see LICENSE file Please do not use in military or secret service organizations, or for...

CVE-2026-85382

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Impacted is the function htmlspecialcharsdecode of the file App/Home/View/Default/Chapter/oneChapter.tpl of the component Chapter Content Output. Performing a...

CVE-2026-85397

A vulnerability was determined in code-projects Hospital Information System 1.0. This impacts the function findBySearch of the file addReq.php. This manipulation of the argument Search causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

CVE-2026-85383

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/invdel.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be us...

CVE-2026-85398 code-projects Hospital Information System viewReq.php viewReq sql injection

A vulnerability was identified in code-projects Hospital Information System 1.0. Affected is the function viewReq of the file viewReq.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used...

CVE-2026-85398

code-projects Hospital Information System 1.0 contains a SQL injection vulnerability in the viewReq function of the file viewReq.php , triggered by manipulating the ID argument. The attack can be launched remotely without authentication. The CVSS 3.1 base score is 7.3 (HIGH) with low impacts on c...

EUVD-2026-70866

A vulnerability was identified in code-projects Hospital Information System 1.0. Affected is the function viewReq of the file viewReq.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used...