Archive
29 April 2024
Vulnerabilities first published on this day (UTC), newest first.
4 results · Clear filters · Feed
-
High 8.1CVE-2024-4309 Public exploit
SQL injection vulnerability in HubBank
SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL query to the database through different endpoints (/user/transaction.php?id=1, /user/credit-debit_transaction.php?id=1,/…
-
High 8.0CVE-2024-33438 Public exploit
File Upload vulnerability in CubeCart before 6.5.5 allows an authenticated user to execute arbitrary code via a crafted…
-
High 7.6
Flowise vulnerable to code injection via api/v1
An issue in FlowiseAI Inc Flowise v.1.6.2 and before allows a remote attacker to execute arbitrary code via a crafted script to the api/v1 component.
-
High 7.8CVE-2024-27518 Public exploit
An issue in SUPERAntiSyware Professional X 10.0.1262 and 10.0.1264 allows unprivileged attackers to escalate privileges…