5.1

CVSS3.1

CVE-2026-42371 - uriparser: uriparser: Denial of Service via numeric truncation with oversized URIs

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes.

πŸ“… Published: April 27, 2026, 5:50 a.m. πŸ”„ Last Modified: April 27, 2026, 8 p.m.

5.3

CVSS4.0

CVE-2026-7092 - code-projects Invoice System in Laravel Profile profile improper authorization

A vulnerability has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /profile/ of the component Profile Handler. Such manipulation of the argument ID leads to improper authorization. The attack can be executed remotely. The exploit has been disc…

πŸ“… Published: April 27, 2026, 5:45 a.m. πŸ”„ Last Modified: April 27, 2026, 5:45 a.m.

5.3

CVSS4.0

CVE-2026-7091 - code-projects Invoice System in Laravel User Management user improper authorization

A flaw has been found in code-projects Invoice System in Laravel 1.0. This impacts an unknown function of the file /user of the component User Management Handler. This manipulation causes improper authorization. Remote exploitation of the attack is possible. The exploit has been published and may b…

πŸ“… Published: April 27, 2026, 5:30 a.m. πŸ”„ Last Modified: April 27, 2026, 5:30 a.m.

4.8

CVSS4.0

CVE-2026-7090 - code-projects Chat System send_message.php cross site scripting

A vulnerability was detected in code-projects Chat System 1.0. This affects an unknown function of the file /admin/send_message.php of the component Chat Interface. The manipulation of the argument msg results in cross site scripting. The attack may be launched remotely. The exploit is now public a…

πŸ“… Published: April 27, 2026, 5:15 a.m. πŸ”„ Last Modified: April 27, 2026, 12:06 p.m.

5.3

CVSS4.0

CVE-2026-7089 - code-projects Home Service System Appointment Booking booking.php cross site scripting

A security vulnerability has been detected in code-projects Home Service System 1.0. The impacted element is an unknown function of the file /booking.php of the component Appointment Booking. The manipulation of the argument fname/lname leads to cross site scripting. The attack may be initiated rem…

πŸ“… Published: April 27, 2026, 5 a.m. πŸ”„ Last Modified: April 27, 2026, 8:20 p.m.

6.9

CVSS4.0

CVE-2026-7088 - SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection

A weakness has been identified in SourceCodester Pharmacy Sales and Inventory System 1.0. The affected element is an unknown function of the file /ajax.php?action=save_receiving. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit …

πŸ“… Published: April 27, 2026, 4:45 a.m. πŸ”„ Last Modified: April 27, 2026, 4:45 a.m.

6.9

CVSS4.0

CVE-2026-7087 - SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection

A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0. Impacted is an unknown function of the file /ajax.php?action=save_sales. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been r…

πŸ“… Published: April 27, 2026, 4:30 a.m. πŸ”„ Last Modified: April 27, 2026, 4:30 a.m.

5.3

CVSS4.0

CVE-2026-7086 - HBAI-Ltd Toonflow-app Storyboard Export replaceUrl.ts updateStoryboardUrl path traversal

A vulnerability was identified in HBAI-Ltd Toonflow-app up to 1.1.1. This issue affects the function updateStoryboardUrl of the file replaceUrl.ts of the component Storyboard Export. Such manipulation of the argument url leads to path traversal. It is possible to launch the attack remotely. The exp…

πŸ“… Published: April 27, 2026, 4:15 a.m. πŸ”„ Last Modified: April 27, 2026, 4:15 a.m.

2.3

CVSS4.0

CVE-2026-7085 - HBAI-Ltd Toonflow-app downloadApp Endpoint downloadApp.ts z.url path traversal

A vulnerability was determined in HBAI-Ltd Toonflow-app up to 1.1.1. This vulnerability affects the function z.url of the file src/routes/setting/about/downloadApp.ts of the component downloadApp Endpoint. This manipulation of the argument url causes path traversal. It is possible to initiate the a…

πŸ“… Published: April 27, 2026, 4 a.m. πŸ”„ Last Modified: April 27, 2026, 4 a.m.

5.3

CVSS4.0

CVE-2026-7084 - HBAI-Ltd Toonflow-app getCodeByLink Endpoint getCodeByLink.ts fetch server-side request forgery

A vulnerability was found in HBAI-Ltd Toonflow-app up to 1.1.1. This affects the function fetch of the file src/routes/setting/vendorConfig/getCodeByLink.ts of the component getCodeByLink Endpoint. The manipulation of the argument Link results in server-side request forgery. The attack may be perfo…

πŸ“… Published: April 27, 2026, 3:45 a.m. πŸ”„ Last Modified: April 27, 2026, 3:45 a.m.
Total resulsts: 347632
Page 94 of 34,764
Β« previous page Β» next page
Filters