Improper Access Control in GitHub repository budibase/budibase prior to 1.3.20.Read More ...
Continue Reading
September 16, 2022
Adobe Animate version 21.0.11 (and earlier) and 22.0.7 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an al ...
Continue Reading
September 16, 2022
ywoa v6.1 is vulnerable to SQL Injection via backend/oa/visual/exportExcel.do interface.Read More ...
Continue Reading
September 16, 2022
EspoCRM version 7.1.8 is vulnerable to Unrestricted File Upload allowing attackers to upload malicious file with any extension to the server. Attacker may execute these malicious files to run unintend ...
Continue Reading
September 16, 2022
CSV Injection in Create Contacts in EspoCRM 7.1.8 allows remote authenticated users to run system commands via creating contacts with payloads capable of executing system commands. Admin user exportin ...
Continue Reading
September 16, 2022
Cross Site Scripting in Import feature in EspoCRM 7.1.8 allows remote users to run malicious JavaScript in victim s browser via sending crafted csv file containing malicious JavaScript to authenticate ...
Continue Reading
September 16, 2022
EspoCRM version 7.1.8 is vulnerable to Missing Secure Flag allowing the browser to send plain text cookies over an insecure channel (HTTP). An attacker may capture the cookie from the insecure channel ...
Continue Reading
September 16, 2022
School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/modstudent/index.php?view=view&id=.Read More ...
Continue Reading
September 16, 2022
Back to Main
