PT-2026-60296

Name of the Vulnerable Software and Affected Versions NocoBase versions prior to 2.0.61 Description An issue exists in the @nocobase/plugin-notification-in-app-message where the 'GET /api/myInAppChannels:list' endpoint is exposed. A signed-up authenticated user can exploit this by providing a val...

MAL-2024-2060 Malicious code in daily-app-message (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in daily-app-message (npm)

--- -= Per source details. Do not edit below this line.=-...

Ecmall Sql injection first watches. - Vulnerability warning-the black bar safety net

Brief description: Hit a patch try. Detailed description: In the app/message. app. php function drop $msgids = isset$GET'msgid' ? trim$GET'msgid' : "; if !$ msgids $this-showwarning'nosuchmessage'; return; $msgids = explode',',$msgids; $modmessage = &m'message'; foreach $msgids as $key=$msgid...