227 matches found
Bitrix24 CMS Code Execution
Vulnerability of the landing module of the Bitrix24 business management service for content management systems CMS: Website management is related to incorrect handling of file names used in PHP functions like include or require. Exploiting this vulnerability allows a malicious actor to execute...
Biztrx24 Business Management Service Unauthorized Access
Vulnerability of access control for Bitrix24 business management services and 1C-Bitrix website content management systems: Website management is associated with the absence of authentication. Exploiting this vulnerability can allow unauthorized users to gain unauthorized access to server-related...
WordPress Flamix: Bitrix24 and Contact Form 7 integrations plugin <= 3.1.0 - Unauthenticated Full Path Disclosure vulnerability
Unauthenticated Full Path Disclosure vulnerability discovered by stealthcopter in WordPress Plugin Flamix: Bitrix24 and Contact Form 7 integrations versions = 3.1.0...
CVE-2022-50911
Rejected reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue...
CVE-2022-50911
Bitrix24 is affected by CVE-2022-50911 per connected sources, described as an authenticated remote code execution vulnerability. An attacker with valid credentials could abuse the PHP command-line administration interface by sending crafted POST requests to an admin endpoint to execute arbitrary ...
CVE-2022-50911
...
Bitrix24 security vulnerabilities
Bitrix24 is a suite of enterprise social platforms from Bitrix USA. The platform includes features such as online communication, calendar management and CRM Customer Relationship Management. A security vulnerability exists in Bitrix24, which originates from authenticated remote code execution, an...
PT-2026-2387
Name of the Vulnerable Software and Affected Versions Bitrix24 affected versions not specified Description A logged-in attacker can execute arbitrary system commands through the PHP command line admin interface, leading to remote code execution. The attacker leverages this by sending crafted POST...
CVE-2024-34891
Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read Exchange account passwords via HTTP GET request...
CVE-2024-34887
Insufficiently protected credentials in AD/LDAP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send AD/LDAP administrators account passwords to an arbitrary server via HTTP POST request...
CVE-2024-34883
Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allow remote administrators to read proxy-server accounts passwords via HTTP GET request...
Exploit for CVE-2025-67886
CVE-2025-67886 Bi...
📄 Bitrix24 25.100.300 Remote Code Execution
Bitrix24 versions 25.100.300 and below have a vulnerability that is located within the Translate Module, which allows users to upload and extract archive files into a temporary directory. However, the application fails to properly verify the contents of these archives before extracting them. This...
Bitrix24 Business Management Email Control
The vulnerability of the Bitrix24 business management service is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to control the content of email messages remotely...
EUVD-2020-5977
Malware in sbrugna...
EUVD-2020-20690
Malware in sbrugna...
EUVD-2020-5734
Malware in sbrugna...