CVE-2026-7092 code-projects Invoice System in Laravel Profile profile improper authorization

A vulnerability has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /profile/ of the component Profile Handler. Such manipulation of the argument ID leads to improper authorization. The attack can be executed remotely. The exploit has been...

CVE-2026-7092

Technical details about CVE-2026-7092 are not publicly available in the provided documents. No affected products, components, or remediation specifics are disclosed here. Monitor for updates.

CVE-2026-7092

A vulnerability has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /profile/ of the component Profile Handler. Such manipulation of the argument ID leads to improper authorization. The attack can be executed remotely. The exploit has been...

EUVD-2026-25780

A vulnerability has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /profile/ of the component Profile Handler. Such manipulation of the argument ID leads to improper authorization. The attack can be executed remotely. The exploit has been...

CVE-2026-7092 code-projects Invoice System in Laravel Profile profile improper authorization

A vulnerability has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /profile/ of the component Profile Handler. Such manipulation of the argument ID leads to improper authorization. The attack can be executed remotely. The exploit has been...

CVE-2026-39474

creationtimestamp| type| source ---|---|--- 2026-04-27 05:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkhdrpsinj2s...

CVE-2026-7106

creationtimestamp| type| source ---|---|--- 2026-04-27 03:31:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkh4z6ewbc2l 2026-04-28 00:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkjdi7e6sz2s...

CVE-2026-7106

The vulnerability CVE-2026-7106 affects the Highland Software Custom Role Manager plugin for WordPress (versions up to and including 1.0.0). The root cause is insufficient authorization checks in the hscrm_save_user_roles() function, hooked to the personal_options_update action. This action is ac...

CVE-2026-7106 Highland Software Custom Role Manager <= 1.0.0 - Authenticated (Subscriber+) Privilege Escalation

The Highland Software Custom Role Manager plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 1.0.0. This is due to insufficient authorization checks in the hscrmsaveuserroles function, which is hooked to the personaloptionsupdate action accessible by any...

PT-2026-35360

A vulnerability has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /profile/ of the component Profile Handler. Such manipulation of the argument ID leads to improper authorization. The attack can be executed remotely. The exploit has been...

Code-Projects Invoice System in Laravel 安全漏洞

Code-Projects Invoice System in Laravel is an open-source invoice system developed by Code-Projects. Version 1.0 of the Code-Projects Invoice System in Laravel contained a security vulnerability. This vulnerability stemmed from improper handling of parameter IDs in the .profile/ file within the...

CVE-2026-40860

creationtimestamp| type| source ---|---|--- 2026-04-26 19:27:35+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkgbyr3nyr2v 2026-07-06 19:53:52+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpyul5kuor2t 2026-07-13 22:00:05+00:00| seen|...

CVE-2026-40022

creationtimestamp| type| source ---|---|--- 2026-04-26 19:11:31+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkgb3zl7js2i 2026-07-16 19:00:20+00:00| seen| Telegram/ZLovNjLGg89Xdb85Ncg0gPVvljsBTAp4HPBtfrCi2Mibg 2026-07-17 01:00:18+00:00| seen|...

CVE-2026-42267

creationtimestamp| type| source ---|---|--- 2026-04-26 18:02:01+00:00| published-proof-of-concept| https://github.com/kimai/kimai/security/advisories/GHSA-3xc2-h5r3-wv3r 2026-05-08 04:38:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcvwai3352o...

CVE-2026-9135

creationtimestamp| type| source ---|---|--- 2026-04-26 15:13:52+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mkftsxttik2h 2026-04-26 15:13:52+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mkftsw4gzs2h 2026-07-17 19:20:04+00:00| seen|...

CVE-2026-7032

creationtimestamp| type| source ---|---|--- 2026-04-26 12:52:59+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mkflx674nw2w 2026-04-29 21:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mknyxj2b4l2p...

CVE-1999-0702

creationtimestamp| type| source ---|---|--- 2026-04-26 12:02:18+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mkfj4kdwe52u...

CVE-2026-4139

creationtimestamp| type| source ---|---|--- 2026-04-26 00:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkecm5ozla2l...

GHSA-J4C5-89F5-F3PM OpenClaw: Browser CDP profile creation skipped strict-mode SSRF checks

Affected Packages / Versions - Package: openclaw npm - Affected versions: 2026.4.20 - Patched version: 2026.4.20 Impact Browser profile creation normalized cdpUrl values before persisting them, but did not apply the configured browser SSRF policy at creation time. In deployments that explicitly...

Server-side Request Forgery (SSRF)

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the browser profile creation process. An attacker can cause unauthorized requests to internal network resources by storing a profile with a cdpUrl...