20157 matches found
CVE-2025-55903
A HTML injection vulnerability exists in Perfex CRM v3.3.1. The application fails to sanitize user input in the "Bill To" address field within the estimate module. As a result, arbitrary HTML can be injected and rendered unescaped in client-facing documents...
CVE-2025-60378
Stored HTML injection in RISE Ultimate Project Manager & CRM allows authenticated users to inject arbitrary HTML into invoices and messages. Injected content renders in emails, PDFs, and messaging/chat modules sent to clients or team members, enabling phishing, credential theft, and business emai...
RISE Ultimate Project Manager & CRM security vulnerabilities
RISE Ultimate Project Manager & CRM is a project management system from RISE. A security vulnerability exists in RISE Ultimate Project Manager & CRM that originates from an authenticated user being able to inject arbitrary HTML into invoices and messages, which could lead to phishing attacks,...
Perfex CRM security vulnerability
Perfex CRM is a customer relationship management software from Perfex CRM open source. It is used to manage customers, projects and create invoices in the cloud. A security vulnerability exists in Perfex CRM version 3.3.1 that stems from uncleaned user input and could lead to an HTML injection...
CVE-2025-60378: Improper Neutralization of Input During Web Page Generation
Stored HTML injection in RISE Ultimate Project Manager & CRM allows authenticated users to inject arbitrary HTML into invoices and messages. Injected content renders in emails, PDFs, and messaging/chat modules sent to clients or team members, enabling phishing, credential theft, and business emai...
CVE-2025-61788
Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Opencast 17.8 and 18.2, the paella would include and render some user inputs metadata like title, description, etc. unfiltered and unmodified. The vulnerability allows attackers to...
EUVD-2025-33290
Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Opencast 17.8 and 18.2, the paella would include and render some user inputs metadata like title, description, etc. unfiltered and unmodified. The vulnerability allows attackers to...
CVE-2025-43771: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the Notifications widget in Liferay Portal 7.4.3.102 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5 and 2023.Q3.1 through 2023.Q3.10 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected in...
PT-2025-41298
Name of the Vulnerable Software and Affected Versions Opencast versions prior to 17.8 Opencast versions prior to 18.2 Description Opencast is a platform for managing educational audio and video content. Prior to versions 17.8 and 18.2, the paella component included and rendered user inputs, such ...
EUVD-2019-16974
Malware in sbrugna...
EUVD-2019-16977
Malware in sbrugna...
EUVD-2019-15535
Malware in sbrugna...
EUVD-2019-15494
Malware in sbrugna...
EUVD-2007-2463
Malware in sbrugna...
EUVD-2006-1500
Malware in sbrugna...
EUVD-2017-14710
Malware in sbrugna...
EUVD-2012-5759
Malware in sbrugna...
EUVD-2012-3280
Malware in sbrugna...