CVE-2024-44623

CVE-2024-44623 In SPX-GC 1.3.0v and below versions, user-controlled input was passed in the exec function of the childprocess module without any sanitization, leading to unauthenticated blind remote code execution. Vulnerability In /routes/routes-api.js, user input received from file param and...

WordPress Acento Theme (view-pdf.php, file param) - Arbitrary File Download

No description provided by source...