159644 matches found
CVE-2026-100887 amirsanni Mini-Inventory-and-Sales-Management-System Database Query Builder DB_query_builder.php order_by sql injection
A security flaw has been discovered in amirsanni Mini-Inventory-and-Sales-Management-System up to 81bf0b55f5933f3b0dbb1583204a612e06605b95. The impacted element is the function orderby of the file DBquerybuilder.php of the component Database Query Builder. Performing a manipulation of the argumen...
CVE-2026-100887
A SQL injection vulnerability exists in the Database Query Builder component of the amirsanni Mini-Inventory-and-Sales-Management-System (versions up to 81bf0b55f5933f3b0dbb1583204a612e06605b95 ). The flaw is located in the order_by function within the DB_query_builder.php file, where manipulatio...
CVE-2026-100886 Seetong T8108/T8108P/T8116/T8232 Debug Service improper authentication
A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011. The affected element is an unknown function of the component Debug Service. Such manipulation leads to improper authentication. The attack may be launched remotely. The exploit is publicly availabl...
CVE-2026-100886 Seetong T8108/T8108P/T8116/T8232 Debug Service improper authentication
A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011. The affected element is an unknown function of the component Debug Service. Such manipulation leads to improper authentication. The attack may be launched remotely. The exploit is publicly availabl...
CVE-2026-100885
The Krayin laravel-crm software, versions up to 2.2.4 , contains an authorization bypass vulnerability in the admin-config-setup API Endpoint. The flaw originates from an unknown function within the file packages/Webkul/Installer/src/Http/Middleware/CanInstall.php. This vulnerability allows for r...
CVE-2026-100885 Krayin laravel-crm admin-config-setup API Endpoint CanInstall.php authorization
A vulnerability was found in Krayin laravel-crm up to 2.2.4. This affects an unknown function of the file packages/Webkul/Installer/src/Http/Middleware/CanInstall.php of the component admin-config-setup API Endpoint. The manipulation results in authorization bypass. The attack may be launched...
CVE-2026-100885 Krayin laravel-crm admin-config-setup API Endpoint CanInstall.php authorization
A vulnerability was found in Krayin laravel-crm up to 2.2.4. This affects an unknown function of the file packages/Webkul/Installer/src/Http/Middleware/CanInstall.php of the component admin-config-setup API Endpoint. The manipulation results in authorization bypass. The attack may be launched...
CVE-2026-100885 Krayin laravel-crm admin-config-setup API Endpoint CanInstall.php authorization
A vulnerability was found in Krayin laravel-crm up to 2.2.4. This affects an unknown function of the file packages/Webkul/Installer/src/Http/Middleware/CanInstall.php of the component admin-config-setup API Endpoint. The manipulation results in authorization bypass. The attack may be launched...
CVE-2026-100884 Krayin laravel-crm attachment-download Endpoint acl.php resource injection
A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the function Storage::download of the file packages/Webkul/Admin/src/Config/acl.php of the component attachment-download Endpoint. The manipulation of the argument ID leads to improper control of resource...
CVE-2026-100884
A resource injection vulnerability exists in Krayin laravel-crm versions up to 2.2.5 within the attachment-download component. Specifically, the Storage::download function in packages/Webkul/Admin/src/Config/acl.php is susceptible to the manipulation of the ID argument, leading to improper contro...
CVE-2026-100884 Krayin laravel-crm attachment-download Endpoint acl.php resource injection
A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the function Storage::download of the file packages/Webkul/Admin/src/Config/acl.php of the component attachment-download Endpoint. The manipulation of the argument ID leads to improper control of resource...
CVE-2026-100884 Krayin laravel-crm attachment-download Endpoint acl.php resource injection
A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the function Storage::download of the file packages/Webkul/Admin/src/Config/acl.php of the component attachment-download Endpoint. The manipulation of the argument ID leads to improper control of resource...
CVE-2026-100882
A vulnerability was detected in Krayin laravel-crm up to 2.2.5. Impacted is an unknown function of the file packages/Webkul/Admin/src/Resources/views/components/layouts/index.blade.php of the component Admin Settings Endpoint. Performing a manipulation of the argument general.settings.footer.labe...
CVE-2026-100881
A security vulnerability has been detected in zhistaredu StarTraining up to 3.8.1. This issue affects some unknown processing of the file application.yml. Such manipulation of the argument xss.enabled leads to cross site scripting. It is possible to launch the attack remotely. Attacks of this...
CVE-2026-100883
A vulnerability exists in Krayin laravel-crm versions up to 2.2.5 due to a flaw in an unknown function within the file packages/Webkul/Admin/src/Config/acl.php. This flaw allows for improper access controls through remote manipulation. The documents state that an exploit has been published and ma...
CVE-2026-100883 Krayin laravel-crm acl.php access control
A flaw has been found in Krayin laravel-crm up to 2.2.5. The affected element is an unknown function of the file packages/Webkul/Admin/src/Config/acl.php. Executing a manipulation can lead to improper access controls. The attack can be launched remotely. The exploit has been published and may be...
CVE-2026-100883 Krayin laravel-crm acl.php access control
A flaw has been found in Krayin laravel-crm up to 2.2.5. The affected element is an unknown function of the file packages/Webkul/Admin/src/Config/acl.php. Executing a manipulation can lead to improper access controls. The attack can be launched remotely. The exploit has been published and may be...
CVE-2026-100883 Krayin laravel-crm acl.php access control
A flaw has been found in Krayin laravel-crm up to 2.2.5. The affected element is an unknown function of the file packages/Webkul/Admin/src/Config/acl.php. Executing a manipulation can lead to improper access controls. The attack can be launched remotely. The exploit has been published and may be...
CVE-2026-100882
A cross-site scripting (XSS) vulnerability exists in Krayin laravel-crm versions up to 2.2.5 . The flaw is located within the Admin Settings Endpoint , specifically involving an unknown function in the file packages/Webkul/Admin/src/Resources/views/components/layouts/index.blade.php. An attacker ...
CVE-2026-100882 Krayin laravel-crm Admin Settings Endpoint index.blade.php cross site scripting
A vulnerability was detected in Krayin laravel-crm up to 2.2.5. Impacted is an unknown function of the file packages/Webkul/Admin/src/Resources/views/components/layouts/index.blade.php of the component Admin Settings Endpoint. Performing a manipulation of the argument general.settings.footer.labe...