Skip to content
OpenAdvisories

Vendor

Redon-Tech

2 known vulnerabilities.

Products

Roblox-Purchasing-Hub 1 Redon-Hub 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2024-31442

    Redon-Hub has incorrect permissions on all admin related commands

    Redon Hub is a Roblox Product Delivery Bot, also known as a Hub. In all hubs before version 1.0.2, all commands are capable of being ran by all users, including admin commands. This allows users to receive products for free and delete/create/update products/t…

    Redon-Tech Redon-Hub
  • High 7.5
    CVE-2021-41191

    API giving out files without key

    Roblox-Purchasing-Hub is an open source Roblox product purchasing hub. A security risk in versions 1.0.1 and prior allowed people who have someone's API URL to get product files without an API key. This issue is fixed in version 1.0.2. As a workaround, add `@…

    Redon-Tech Roblox-Purchasing-Hub