230 matches found
PT-2026-3028
Name of the Vulnerable Software and Affected Versions InvoicePlane versions through 1.6.3 Description A file upload issue exists in InvoicePlane that allows authenticated attackers to upload arbitrary PHP files into attachments. These uploaded files can then be executed remotely, potentially...
EUVD-2026-2782
Directory traversal vulnerability in InvoicePlane through 1.6.3 allows unauthenticated attackers to read files from the server. The ability to read files and the file type depends on the web server and its configuration...
InvoicePlane security vulnerabilities
InvoicePlane is an open-source application developed by InvoicePlane. It provides a self-hosted open-source tool for managing your quotes, invoices, customers, and payments. InvoicePlane versions 1.6.3 and earlier have security vulnerabilities, stemming from directory traversal vulnerabilities th...
CVE-2025-64012
InvoicePlane commit debb446c is vulnerable to Incorrect Access Control. The invoices/view handler fails to verify ownership before returning invoice data...
EUVD-2025-203770
InvoicePlane commit debb446c is vulnerable to Incorrect Access Control. The invoices/view handler fails to verify ownership before returning invoice data...
CVE-2025-64012
InvoicePlane commit debb446c is vulnerable to Incorrect Access Control. The invoices/view handler fails to verify ownership before returning invoice data...
CVE-2025-64012
InvoicePlane commit debb446c is vulnerable to Incorrect Access Control. The invoices/view handler fails to verify ownership before returning invoice data...
CVE-2025-64012
InvoicePlane commit debb446c is vulnerable to Incorrect Access Control. The invoices/view handler fails to verify ownership before returning invoice data...
PT-2025-51684
Name of the Vulnerable Software and Affected Versions InvoicePlane versions prior to commit debb446c Description The software contains an issue related to incorrect access control. Specifically, the invoices/view handler does not properly verify ownership before disclosing invoice data. This coul...
CVE-2025-64012
CVE-2025-64012 affects InvoicePlane. The vulnerability is an Incorrect Access Control flaw in the invoices/view handler where ownership is not verified before returning invoice data, potentially leaking invoice information. Root cause is lack of ownership verification around invoice data disclosu...
InvoicePlane 安全漏洞
InvoicePlane is an application from InvoicePlane Open Source. Provides a self-hosted open source application for managing your quotes, invoices, customers and payments. InvoicePlane suffers from a security vulnerability that stems from improper access control and could lead to invoice data leakag...
EUVD-2017-1506
Malware in sbrugna...
EUVD-2021-15668
Malware in sbrugna...
EUVD-2021-15670
Malware in sbrugna...
EUVD-2019-16767
Malware in sbrugna...
EUVD-2017-1507
Malware in sbrugna...
EUVD-2021-15669
Malware in sbrugna...
EUVD-2018-4233
Malware in sbrugna...