NocoDB leaks other creators' private integration configuration when includeConfig is omitted

NocoDB Private Integration Configuration Information Disclosure Vulnerability Overview NocoDB's workspace-level Base Integration read service has an authorization logic flaw in its handling of the includeConfig request parameter: the check that "a private integration's configuration is visible on...

sqlicat

sqlicat Framework de SQL Injection em Python puro stdlib...

Information disclosure

SmartStar Software CWS is a web-base integration platform, it has a vulnerability of using a hard-coded for a specific account with low privilege. An unauthenticated remote attacker can exploit this vulnerability to run partial processes and obtain partial information, but can't disrupt service o...

CVE-2023-48374

The CVE-2023-48374 entry pertains to SmartStar Software CWS, a web-based integration platform. The vulnerability is described as using a hard-coded credential for a specific low-privilege account, enabling an unauthenticated remote attacker to run partial processes and view partial information. T...