pravel

Products

ProductCVEsExploitedLatest
Invoice Generator2–Jun 27, 2026
SignUp & SignIn1–Jun 24, 2026

Exploited and recent CVEs

  • CVE-2026-12415 Critical 9.8 Invoice Generator <= 1.0.0 - Unauthenticated Privilege Escalation via Account Takeover via 'user_id' Parameter 0.8%
  • CVE-2026-12416 Critical 9.8 Invoice Generator <= 1.0.0 - Unauthenticated Account Takeover via Weak Password Reset Validation via 'reset_user_id' Parameter 0.7%
  • CVE-2026-12417 Critical 9.8 SignUp & SignIn <= 1.0.0 - Unauthenticated Privilege Escalation via Weak Password Reset Validation via 'reset_activation_code' Leading to Account Takeover 0.8%