Skip to content
OpenAdvisories

Archive

31 March 2026

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 4.7
    CVE-2026-5203 Public exploit

    CMS Made Simple UserGuide Module XML Import class.UserGuideImporterExporter.php _copyFilesToFolder path traversal

    A vulnerability was found in CMS Made Simple up to 2.2.22. This impacts the function _copyFilesToFolder in the library modules/UserGuide/lib/class.UserGuideImporterExporter.php of the component UserGuide Module XML Import. The manipulation results in path tra…

  • Medium 5.9
    CVE-2026-34227 Public exploit

    Sliver One-Click Remote Access: Insecure CORS & Unauthenticated MCP Interface

    Sliver is a command and control framework that uses a custom Wireguard netstack. Prior to version 1.7.4, a single click on a malicious link gives an unauthenticated attacker immediate, silent control over every active C2 session or beacon, capable of exfiltra…

  • Medium 6.5
    CVE-2026-34036 Public exploit Scanner template

    Dolibarr Core Discloses Sensitive Data via Authenticated Local File Inclusion in selectobject.php

    Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package. In versions 22.0.4 and prior, there is a Local File Inclusion (LFI) vulnerability in the core AJAX endpoint /core/ajax/selectobject.php. By manipula…