Lucene search
+L

87 matches found

Positive Technologies
Positive Technologies
•added 2026/05/25 12:00 a.m.•40 views

PT-2026-42980

A flaw has been found in Sushmi-pal Invoice-System up to a0a3faa16dee2621b231ae227333f5761607283b. This affects an unknown part of the file /user of the component User Management Handler. This manipulation of the argument role causes improper authorization. It is possible to initiate the attack...

5.3CVSS5AI score0.00337EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/05/25 12:00 a.m.•37 views

PT-2026-42981

A vulnerability has been found in Sushmi-pal Invoice-System up to a0a3faa16dee2621b231ae227333f5761607283b. This vulnerability affects unknown code of the file /profile of the component Profile Workflow. Such manipulation of the argument ID leads to improper authorization. It is possible to launc...

5.3CVSS5.4AI score0.00337EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/04/29 2:49 p.m.•17 views

CVE-2026-7110

A flaw has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /item. Executing a manipulation of the argument item name/description can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published an...

5.1CVSS3.4AI score0.00331EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/04/29 2:49 p.m.•16 views

CVE-2026-7092

A vulnerability has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /profile/ of the component Profile Handler. Such manipulation of the argument ID leads to improper authorization. The attack can be executed remotely. The exploit has been...

6.5CVSS6.1AI score0.00347EPSS
SaveExploits0References1
NVD
NVD
•added 2026/04/27 10:16 a.m.•24 views

CVE-2026-7109

A vulnerability was detected in code-projects Invoice System in Laravel 1.0. This impacts an unknown function of the file /item of the component API Endpoint. Performing a manipulation results in improper authorization. It is possible to initiate the attack remotely. The exploit is now public and...

6.9CVSS0.00483EPSS
SaveExploits0References5
NVD
NVD
•added 2026/04/27 10:16 a.m.•20 views

CVE-2026-7110

A flaw has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /item. Executing a manipulation of the argument item name/description can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published an...

5.1CVSS0.00331EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/04/27 9:30 a.m.•12 views

CVE-2026-7110 code-projects Invoice System in Laravel item cross site scripting

A flaw has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /item. Executing a manipulation of the argument item name/description can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published an...

5.1CVSS3.9AI score0.00331EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/04/27 9:30 a.m.•18 views

EUVD-2026-25811

A flaw has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /item. Executing a manipulation of the argument item name/description can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published an...

5.1CVSS3.6AI score0.00331EPSS
SaveExploits0References5
CVE
CVE
•added 2026/04/27 9:30 a.m.•31 views

CVE-2026-7110

CVE-2026-7110 concerns code-projects Invoice System (Laravel 1.0). The vulnerability arises from an unspecified function in the /item file where manipulation of the item name/description parameter can trigger cross-site scripting. The issue is exploitable remotely, and an exploit has been publish...

5.1CVSS3.9AI score0.00331EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/04/27 9:30 a.m.•13 views

CVE-2026-7110

A flaw has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /item. Executing a manipulation of the argument item name/description can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published an...

5.1CVSS3.4AI score0.00331EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2026/04/27 9:16 a.m.•20 views

CVE-2026-7107

A weakness has been identified in code-projects Invoice System in Laravel 1.0. The impacted element is an unknown function of the file /company. This manipulation of the argument logo causes unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made availabl...

6.5CVSS0.00347EPSS
SaveExploits0References5
NVD
NVD
•added 2026/04/27 9:16 a.m.•24 views

CVE-2026-7108

A security vulnerability has been detected in code-projects Invoice System in Laravel 1.0. This affects an unknown function. Such manipulation leads to cross-site request forgery. The attack may be performed from remote. The exploit has been disclosed publicly and may be used...

5.3CVSS0.00225EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/04/27 9:15 a.m.•18 views

EUVD-2026-25810

A vulnerability was detected in code-projects Invoice System in Laravel 1.0. This impacts an unknown function of the file /item of the component API Endpoint. Performing a manipulation results in improper authorization. It is possible to initiate the attack remotely. The exploit is now public and...

6.9CVSS5.6AI score0.00483EPSS
SaveExploits0References5
CVE
CVE
•added 2026/04/27 9:15 a.m.•35 views

CVE-2026-7109

CVE-2026-7109 affects code-projects Invoice System (Laravel 1.0) with a vulnerability in the API Endpoint item/file that enables improper authorization. The underlying issue is exploitable remotely; multiple sources note public exposure and PoC-like exploitation. No specific patch/version remedia...

6.9CVSS5.6AI score0.00483EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/04/27 9:15 a.m.•47 views

CVE-2026-7109 code-projects Invoice System in Laravel API Endpoint item improper authorization

A vulnerability was detected in code-projects Invoice System in Laravel 1.0. This impacts an unknown function of the file /item of the component API Endpoint. Performing a manipulation results in improper authorization. It is possible to initiate the attack remotely. The exploit is now public and...

6.9CVSS0.00483EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/04/27 9:15 a.m.•11 views

CVE-2026-7109 code-projects Invoice System in Laravel API Endpoint item improper authorization

A vulnerability was detected in code-projects Invoice System in Laravel 1.0. This impacts an unknown function of the file /item of the component API Endpoint. Performing a manipulation results in improper authorization. It is possible to initiate the attack remotely. The exploit is now public and...

6.9CVSS5.6AI score0.00483EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/04/27 9:15 a.m.•7 views

CVE-2026-7109

A vulnerability was detected in code-projects Invoice System in Laravel 1.0. This impacts an unknown function of the file /item of the component API Endpoint. Performing a manipulation results in improper authorization. It is possible to initiate the attack remotely. The exploit is now public and...

6.9CVSS5.4AI score0.00483EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
•added 2026/04/27 9:00 a.m.•26 views

EUVD-2026-25805

A security vulnerability has been detected in code-projects Invoice System in Laravel 1.0. This affects an unknown function. Such manipulation leads to cross-site request forgery. The attack may be performed from remote. The exploit has been disclosed publicly and may be used...

5.3CVSS4.8AI score0.00225EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/04/27 9:00 a.m.•10 views

CVE-2026-7108

A security vulnerability has been detected in code-projects Invoice System in Laravel 1.0. This affects an unknown function. Such manipulation leads to cross-site request forgery. The attack may be performed from remote. The exploit has been disclosed publicly and may be used...

5.3CVSS4.8AI score0.00225EPSS
SaveExploits0References5Affected Software1
CVE
CVE
•added 2026/04/27 9:00 a.m.•32 views

CVE-2026-7108

Technical details about CVE-2026-7108 are not publicly available in the provided documents. No confirmed affected products, versions, or exploitable vectors are disclosed. Monitor for updates.

5.3CVSS5.1AI score0.00225EPSS
SaveExploits0References5
Rows per page
Query Builder