218 matches found
EUVD-2022-24574
Malicious code in bioql PyPI...
EUVD-2024-35026
Malicious code in bioql PyPI...
EUVD-2024-47016
Malicious code in bioql PyPI...
EUVD-2024-48325
Malicious code in bioql PyPI...
EUVD-2023-35424
Malicious code in bioql PyPI...
EUVD-2023-58999
Malicious code in bioql PyPI...
WordPress WP Gravity Forms HubSpot Plugin <= 1.2.5 - Open Redirection Vulnerability
Open Redirection Vulnerability discovered by Bonds in WordPress Plugin WP Gravity Forms HubSpot versions = 1.2.5...
Improper Neutralization of Special Elements Used in a Template Engine
Overview com.hubspot.jinjava:jinjava is a Java-based template engine based on django template syntax, adapted to render jinja templates at least the subset of jinja in use in HubSpot content. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a...
HubSpot Jinjava 安全漏洞
HubSpot Jinjava is an application by the individual developers of HubSpotn in the United States. It provides a Java-based template templating engine, based on Django template syntax, suitable for rendering jinja templates. A security vulnerability exists in HubSpot Jinjava versions prior to 2.8.1...
Malicious code in leadconduit-hubspot (npm)
The package leadconduit-hubspot was found to contain malicious code...
MAL-2025-25027 Malicious code in leadconduit-hubspot (npm)
The package leadconduit-hubspot was found to contain malicious code...
WordPress WP Gravity Forms HubSpot plugin <= 1.2.6 - Deserialization of untrusted data vulnerability
Deserialization of untrusted data vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin WP Gravity Forms HubSpot versions = 1.2.6...
Malicious code in hubspot-cms-deploy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb6184defa0162c7c46179a4c0e85e5df794bc2fadb23f9649184487324684b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5781 Malicious code in hubspot-cms-deploy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb6184defa0162c7c46179a4c0e85e5df794bc2fadb23f9649184487324684b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-5879
The HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' attribute of the HubSpot Meeting Widget in all versions up to, and including, 11.1.22 due to insufficient input sanitization and output escaping. This...
CVE-2023-6788
The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.1. This is due to missing or incorrect nonce validation on the contents function. This makes it possible for unauthenticated attackers to update th...
CVE-2022-1239
The HubSpot WordPress plugin before 8.8.15 does not validate the proxy URL given to the proxy REST endpoint, which could allow users with the editposts capability by default contributor and above to perform SSRF attacks...
HubSpot vs Salesforce: Which CRM Fits Your Business?
You’ve got an important choice to make: HubSpot or Salesforce?...
CVE-2024-7389
The Forminator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.29.1 via class-forminator-addon-hubspot-wp-api.php. This makes it possible for unauthenticated attackers to extract the HubSpot integration developer API key and make...