927 matches found
CVE-2025-59428 EspoCRM allows arbitrary user creation via stored SVG injection and CSRF
EspoCRM is an open source customer relationship management application. In versions before 9.1.9, a vulnerability allows arbitrary user creation, including administrative accounts, through a combination of stored SVG injection and lack of CSRF protection. An attacker with Knowledge Base edit...
CVE-2025-59428 EspoCRM allows arbitrary user creation via stored SVG injection and CSRF
EspoCRM is an open source customer relationship management application. In versions before 9.1.9, a vulnerability allows arbitrary user creation, including administrative accounts, through a combination of stored SVG injection and lack of CSRF protection. An attacker with Knowledge Base edit...
CVE-2025-59428
CVE-2025-59428 affects EspoCRM up to version 9.1.8. A combination of stored SVG injection and missing CSRF protection allows an attacker with Knowledge Base edit permissions to cause arbitrary user creation (including admin accounts) by luring an authenticated user to click a malicious SVG link t...
CVE-2025-59428: Cross-Site Request Forgery (CSRF)
EspoCRM is an open source customer relationship management application. In versions before 9.1.9, a vulnerability allows arbitrary user creation, including administrative accounts, through a combination of stored SVG injection and lack of CSRF protection. An attacker with Knowledge Base edit...
GHSA-99H5-PJCV-GR6V Better Auth: Unauthenticated API key creation through api-key plugin
Summary A critical authentication bypass was identified in the API key creation and update endpoints. An attacker could create or modify API keys for arbitrary users by supplying a victim’s user ID in the request body. Due to a flaw in how the authenticated user was derived, the endpoints could...
EUVD-2018-5516
Malware in sbrugna...
EUVD-2018-5514
Malware in sbrugna...
EUVD-2018-5442
Malware in sbrugna...
EUVD-2018-5024
Malware in sbrugna...
EUVD-2018-5411
Malware in sbrugna...
EUVD-2018-5440
Malware in sbrugna...
EUVD-2018-5401
Malware in sbrugna...
EUVD-2018-5519
Malware in sbrugna...
EUVD-2018-5040
Malware in sbrugna...
EUVD-2018-5652
Malware in sbrugna...
EUVD-2018-5414
Malware in sbrugna...
EUVD-2018-5647
Malware in sbrugna...
EUVD-2018-5668
Malware in sbrugna...