Vulnerabilities
NocoBase SQL Injection Allows Privileged Users to Bypass Validation
A flaw in NocoBase through 2.2.28 lets attackers store unvalidated SQL via the collection plugin, risking database exfiltration.
CWE-89
Everything Firewall Pulse has reported about CWE-89: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Vulnerabilities
TSG Profleet SQL Injection in Index Endpoint Risks Database Manipulation
A critical SQL injection flaw in TSG Profleet allows attackers to manipulate database records via a specific CGI parameter before a defined date.