CVE-2026-72853

Budibase before 3.40.0 contains a SQL injection vulnerability in the Oracle datasource connector's post-write row lookup that fails to escape table names in identifiers. Attackers with write permission on a table with a double-quote in its name can inject SQL that executes as the datasource's...

PT-2022-4352

Name of the Vulnerable Software and Affected Versions General Bytes Crypto Application Server affected versions not specified Description The issue is related to a cross-site request forgery vulnerability in the General Bytes Crypto Application Server. This could allow a remote attacker to create...