6.9

CVSS4.0

CVE-2026-7094 - ShadowCloneLabs GlutamateMCPServers puppeteer_navigate index.ts server-side request forgery

A vulnerability was determined in ShadowCloneLabs GlutamateMCPServers up to e2de73280b01e5d943593dd1aa2c01c5b9112f78. Affected by this issue is some unknown functionality of the file src/puppeteer/index.ts of the component puppeteer_navigate. Executing a manipulation of the argument url can lead to…

πŸ“… Published: April 27, 2026, 6:15 a.m. πŸ”„ Last Modified: April 27, 2026, 1:29 p.m.

6.6

CVSS3.1

CVE-2026-3008 - Vulnerability in Notepad++

Successful exploitation of the string injection vulnerability could allow an attacker to obtain memory address information or crash the application.

πŸ“… Published: April 27, 2026, 6:04 a.m. πŸ”„ Last Modified: April 27, 2026, 1:29 p.m.

5.3

CVSS4.0

CVE-2026-7093 - code-projects Invoice System in Laravel Invoice Endpoint invoice improper authorization

A vulnerability was found in code-projects Invoice System in Laravel 1.0. Affected by this vulnerability is an unknown functionality of the file /invoice/ of the component Invoice Endpoint. Performing a manipulation of the argument ID results in improper authorization. The attack is possible to be …

πŸ“… Published: April 27, 2026, 6 a.m. πŸ”„ Last Modified: April 27, 2026, 6 a.m.

5.1

CVSS3.1

CVE-2026-42371 -

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes.

πŸ“… Published: April 27, 2026, 5:50 a.m. πŸ”„ Last Modified: April 27, 2026, 6:07 a.m.

5.3

CVSS4.0

CVE-2026-7092 - code-projects Invoice System in Laravel Profile profile improper authorization

A vulnerability has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /profile/ of the component Profile Handler. Such manipulation of the argument ID leads to improper authorization. The attack can be executed remotely. The exploit has been disc…

πŸ“… Published: April 27, 2026, 5:45 a.m. πŸ”„ Last Modified: April 27, 2026, 5:45 a.m.

5.3

CVSS4.0

CVE-2026-7091 - code-projects Invoice System in Laravel User Management user improper authorization

A flaw has been found in code-projects Invoice System in Laravel 1.0. This impacts an unknown function of the file /user of the component User Management Handler. This manipulation causes improper authorization. Remote exploitation of the attack is possible. The exploit has been published and may b…

πŸ“… Published: April 27, 2026, 5:30 a.m. πŸ”„ Last Modified: April 27, 2026, 5:30 a.m.

4.8

CVSS4.0

CVE-2026-7090 - code-projects Chat System send_message.php cross site scripting

A vulnerability was detected in code-projects Chat System 1.0. This affects an unknown function of the file /admin/send_message.php of the component Chat Interface. The manipulation of the argument msg results in cross site scripting. The attack may be launched remotely. The exploit is now public a…

πŸ“… Published: April 27, 2026, 5:15 a.m. πŸ”„ Last Modified: April 27, 2026, 5:15 a.m.

5.3

CVSS4.0

CVE-2026-7089 - code-projects Home Service System Appointment Booking booking.php cross site scripting

A security vulnerability has been detected in code-projects Home Service System 1.0. The impacted element is an unknown function of the file /booking.php of the component Appointment Booking. The manipulation of the argument fname/lname leads to cross site scripting. The attack may be initiated rem…

πŸ“… Published: April 27, 2026, 5 a.m. πŸ”„ Last Modified: April 27, 2026, 1:29 p.m.

6.9

CVSS4.0

CVE-2026-7088 - SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection

A weakness has been identified in SourceCodester Pharmacy Sales and Inventory System 1.0. The affected element is an unknown function of the file /ajax.php?action=save_receiving. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit …

πŸ“… Published: April 27, 2026, 4:45 a.m. πŸ”„ Last Modified: April 27, 2026, 4:45 a.m.

6.9

CVSS4.0

CVE-2026-7087 - SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection

A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0. Impacted is an unknown function of the file /ajax.php?action=save_sales. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been r…

πŸ“… Published: April 27, 2026, 4:30 a.m. πŸ”„ Last Modified: April 27, 2026, 4:30 a.m.
Total resulsts: 346727
Page 7 of 34,673
Β« previous page Β» next page
Filters