Design/Logic Flaw

OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field...

Input validation

OpenCRX version 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number...

CVE-2023-40816

OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field...

CVE-2023-40809

OpenCRX version 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number...

CVE-2023-40813

OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation...

CVE-2023-40816

OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field...

CVE-2023-40816

OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field...

PT-2023-27650 · Opencrx · Opencrx

Name of the Vulnerable Software and Affected Versions: OpenCRX version 5.2.0 Description: The issue allows for HTML injection via Activity Saved Search Creation. Recommendations: For OpenCRX version 5.2.0, update to a version that fixes this issue, as no specific workaround is provided for this...

CVE-2023-40813

OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation...

OpenCRX Security Vulnerabilities

openCRX is an open source Crm software. A security vulnerability exists in OpenCRX version 5.2.0, which originated from a vulnerability that allows attackers to conduct HTML injection attacks via the component Activity Search Criteria-Activity Number...

PT-2023-27647 · Opencrx · Opencrx

Name of the Vulnerable Software and Affected Versions: OpenCRX version 5.2.0 Description: The issue concerns HTML injection via the Activity Number in the Activity Search Criteria. Recommendations: For OpenCRX version 5.2.0, as a temporary workaround, consider restricting access to the Activity...

openCRX Security Vulnerabilities

openCRX is an open source Crm software. A security vulnerability exists in openCRX version 5.2.0, which originated from a vulnerability that allows attackers to conduct HTML injection attacks via the Activity Milestone Name field...

CVE-2023-40813

OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation...

CVE-2023-40816

OpenCRX 5.2.0 is vulnerable to HTML injection via the Activity Milestone Name Field, with reports indicating Cross‑Site Scripting potential (malicious script injection). Root cause: inadequate input sanitization/validation for that field. Exploitation details are not provided in the documents; no...

CVE-2023-40809

OpenCRX version 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number...

MAL-2023-8528 Malicious code in vehicle-data-store-connection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4c6802f89906e18e5e41df18e11e76065ac56c4b4c2c8352c4d6a6c4bc8b43ff The OpenSSF Package Analysis project identified 'vehicle-data-store-connection' @ 4.0.0 npm as malicious. It is considered malicious because: -...

Understanding the Phobos affiliate structure and activity

Cisco Talos recently identified the most prolific Phobos variants, common affiliate tactics, techniques and procedures TTPs, and characteristics of the Phobos affiliate structure, based on observed Phobos activity and analysis of over 1,000 Phobos samples from VirusTotal dating back to 2019. We...

MAL-2023-8525 Malicious code in schibsted-ufo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a28167ab8729dd1bbb8263b5862e431e6df15135343db190e75aab652e104eea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

What Is Multi-Homing?

Decoding the Term: Deciphering the Significance of Multi-Homing? The term multi-homing, in the realm of computer networking, finds itself surrounded by considerable confusion owing to its multifaceted technical nuances. Nevertheless, it stands as a pillar of network security and dependability...

MAL-2023-8519 Malicious code in oasis-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bbbb6d6d51b6b4eae513979526b1a1d3c7c7b9947f319737a35fe899336adfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...