CVE-2025-68428_PoC

CVE-2025-68428PoC $ git clone https://github.com/12nio/CVE-2025-68428PoC/ && cd CVE-2025-68428PoC $ sudo docker build -t poc . $ sudo docker run --rm -p 8080:8080 --name vuln poc $ curl "http://127.0.0.1:8080/api/v1/generate-invoice?client=Dinko&branding=../secret" --output poc.pdf...

Malicious code in lightinng-invoice (RubyGems)

RubyGems runs this gem's native extension script ext/lightinng-invoice/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in lightning-invoice-utils (RubyGems)

RubyGems runs this gem's native extension script ext/lightning-invoice-utils/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is ov...

Malicious code in ligbtning-invoice (RubyGems)

RubyGems runs this gem's native extension script ext/ligbtning-invoice/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in lighthing-invoice (RubyGems)

RubyGems runs this gem's native extension script ext/lighthing-invoice/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

CVE-2022-43144-Stored-XSS

CVE-2022-43144 : 存储型XSS 描述 Canteen Management System v1.0 中的跨站脚本（XSS）漏洞允许攻击者通过精心构造的载荷执行任意 Web 脚本或 HTML。 影响 允许攻击者劫持用户会话并接管账户。 要利用此漏洞，受害者必须访问存储了 XXS 载荷的页面。 受影响应用程序链接 https://www.sourcecodester.com/php/15688/canteen-management-system-project-source-code-php.html...

CVE-2024-55555

Laravel Crypto Killer 批量扫描器 CVE-2024-55555 此脚本用于批量扫描存在 CVE-2024-55555 漏洞的 Laravel 应用程序，该漏洞是 Invoice Ninja 中的一个未经身份验证的远程代码执行 RCE 漏洞。它自动化检测使用弱或已知 APPKEY 值的站点，并检查它们是否易受攻击。 📌 工作原理 1. 从 list.txt 读取域名列表。 2. 向每个目标发送请求，捕获 Laravel 加密的 Cookie（排除 XSRF-TOKEN）。 3. 使用 laravel-crypto-killer 进行暴力破解解密，寻找有效的 APPKE...

Crater-CVE-2023-46865-RCE

Crater-CVE-2023-46865-RCE Crater =6.0.6，CVE-2023-46865 认证后远程代码执行（超级管理员） 漏洞描述 Crater Invoice 缺乏适当的输入验证，存在可上传危险类型文件的不受限制的文件上传漏洞。通过在 IDAT 图像数据块中嵌入有效的 PHP 载荷，即可绕过 Base64Mime 检查类。具有超级管理员权限的用户可以通过公司徽标上传接口 /api/v1/company/upload-logo 上传构造的载荷。 使用方法 $ usage: python3 crater-rce.py --target TARGET --email...

WordPress Print Invoice & Delivery Notes for WooCommerce <= 5.8.0 - Remote Code Execution

Print Invoice & Delivery Notes for WooCommerce plugin for WordPress = 5.8.0 contains a remote code execution caused by missing capability check, PHP enabled in Dompdf, and missing escape in template.php, letting unauthenticated attackers execute code on the server. id: CVE-2025-13773 info: name:...

CVE-2026-54596

CVE-2026-54596 - recurringinvoicefrequency パラメータを介した認証済みSQLインジェクションによりデータベース全体の流出が可能 重要度: 高 アドバイザリ: GHSA-f9m3-qjc9-v27j 修正: コミット 7211426 作成者: iltosec 概要...

CVE-2026-94432

The Appointment Booking Plugin – LatePoint for WordPress is vulnerable to an Insecure Direct Object Reference (IDOR) in versions up to and including 5.7.1 . The flaw exists in the OsPaypalConnectController::create_order_for_transaction() action, which is exposed as an unauthenticated route via wp...

PT-2026-104140

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.7.1 via the OsPaypalConnectController::create order for transaction action registered as a public...

WordPress Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin <= 5.7.1 - Insecure Direct Object Reference to Unauthenticated Unauthorized Transaction Intent Creation/Modification and Invoice Enumeration vulnerability

Insecure Direct Object Reference to Unauthenticated Unauthorized Transaction Intent Creation/Modification and Invoice Enumeration vulnerability discovered by Niv Kochan, Matan Bachar in WordPress Plugin LatePoint versions = 5.7.1...

CVE-2026-25596

CVE-2026-25596 — InvoicePlane 1.7.0 中通过产品单位名称触发的存储型 XSS 漏洞类型： 通过产品单位名称字段触发的存储型跨站脚本（XSS） 产品： InvoicePlane 受影响版本： 1.7.0（可能影响更早版本） 严重程度： 中危 CVSS 3.1 评分： 4.8（CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N） CWE： CWE-79：在网页生成期间未对输入进行适当中和 发现者： Leonidas Agathos 报告日期： 2026-01-31 描述...

CVE-2026-25595

CVE-2026-25595 — InvoicePlane 1.7.0 中通过发票编号存储的 XSS 漏洞 漏洞类型： 通过发票编号字段存储的跨站脚本（XSS） 产品： InvoicePlane 受影响版本： 1.7.0（以及可能更早的版本） 严重性： 中危 CVSS 3.1 评分： 4.8（CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N） CWE： CWE-79：网页生成过程中输入的不当中和 发现者： Leonidas Agathos 报告日期： 2026-01-31 描述 发票表单中的 invoicenumber...

CVE-2025-60378

CVE-2025-60378：RISE Ultimate Project Manager & CRM 中的存储型 HTML 注入漏洞 ⚠️ 安全公告 影响发票、消息传递和自动化通信的关键存储型 HTML 注入漏洞 -ff6600 📋 概述 在 RISE Ultimate Project Manager & CRM 中发现了一个关键的存储型 HTML 注入漏洞，该漏洞允许已认证用户将恶意 HTML 注入到发票行项目、客户备注和消息传递模块中。这些注入的内容会持久化存储在数据库中，并自动在面向客户的电子邮件、PDF...

CVE-2025-55903

CVE-2025-55903：PerfexCRM 中的存储型 HTML 注入漏洞 ⚠️ 安全公告 一个影响发票、账单和自动化通信的严重存储型 HTML 注入漏洞 -ff6600 📋 概述 在 PerfexCRM 中发现了一个存储型 HTML 注入漏洞，允许已认证用户将恶意 HTML 注入到发票描述、账单地址和客户备注中。该注入内容会持久化存储在数据库中，并自动在面向客户的电子邮件和 PDF 附件中渲染，从而能够发起大规模网络钓鱼攻击、商业电子邮件诈骗，并可能传播恶意软件。 🎯 受影响版本 产品： PerfexCRM 受影响版本： 3.3.1 修复版本： 3.3.1+ 🔍 漏洞详情 属性| ...

CVE-2026-101139

A vulnerability was detected in Webkul Bagisto up to 2.4.6/2.5.0-beta4. This impacts an unknown function of the file /admin/sales/invoices/mass-update/state of the component Invoice Mass Status Update. Performing a manipulation results in missing authorization. The attack can be initiated remotel...

CVE-2026-101139 Webkul Bagisto Invoice Mass Status Update state authorization

A vulnerability was detected in Webkul Bagisto up to 2.4.6/2.5.0-beta4. This impacts an unknown function of the file /admin/sales/invoices/mass-update/state of the component Invoice Mass Status Update. Performing a manipulation results in missing authorization. The attack can be initiated remotel...

CVE-2026-101139 Webkul Bagisto Invoice Mass Status Update state authorization

A vulnerability was detected in Webkul Bagisto up to 2.4.6. This impacts an unknown function of the file /admin/sales/invoices/mass-update/state of the component Invoice Mass Status Update. Performing a manipulation results in missing authorization. The attack can be initiated remotely. The explo...