10175 matches found
CVE-2025-59428 EspoCRM allows arbitrary user creation via stored SVG injection and CSRF
EspoCRM is an open source customer relationship management application. In versions before 9.1.9, a vulnerability allows arbitrary user creation, including administrative accounts, through a combination of stored SVG injection and lack of CSRF protection. An attacker with Knowledge Base edit...
CVE-2025-59428 EspoCRM allows arbitrary user creation via stored SVG injection and CSRF
EspoCRM is an open source customer relationship management application. In versions before 9.1.9, a vulnerability allows arbitrary user creation, including administrative accounts, through a combination of stored SVG injection and lack of CSRF protection. An attacker with Knowledge Base edit...
CVE-2025-59428
CVE-2025-59428 affects EspoCRM up to version 9.1.8. A combination of stored SVG injection and missing CSRF protection allows an attacker with Knowledge Base edit permissions to cause arbitrary user creation (including admin accounts) by luring an authenticated user to click a malicious SVG link t...
PT-2025-41935
Name of the Vulnerable Software and Affected Versions EspoCRM versions prior to 9.1.9 Description EspoCRM is a customer relationship management application. A flaw allows the creation of arbitrary user accounts, including those with administrative privileges. This is achieved through a combinatio...
CVE-2025-59428: Cross-Site Request Forgery (CSRF)
EspoCRM is an open source customer relationship management application. In versions before 9.1.9, a vulnerability allows arbitrary user creation, including administrative accounts, through a combination of stored SVG injection and lack of CSRF protection. An attacker with Knowledge Base edit...
ULTIMATE-CYBERSECURITY-MASTER-GUIDE
🛡️ ULTIMATE CYBERSECURITY MASTER GUIDE COLLECTION 📊 Comple...
EUVD-2017-4186
Malware in sbrugna...
EUVD-2020-18661
Malware in sbrugna...
EUVD-2007-1036
Malware in sbrugna...
EUVD-2019-5566
Malware in sbrugna...
EUVD-2005-3934
Malware in sbrugna...
EUVD-2020-3421
Malware in sbrugna...
EUVD-2008-1909
Malware in sbrugna...
EUVD-2008-5067
Malware in sbrugna...
EUVD-2005-3845
Malware in sbrugna...
EUVD-2006-6551
Malware in sbrugna...
EUVD-2008-3541
Malware in sbrugna...
EUVD-2005-1199
Malware in sbrugna...
Detecting DLL hijacking with machine learning: real-world cases
Introduction Our colleagues from the AI expertise center recently developed a machine-learning model that detects DLL-hijacking attacks. We then integrated this model into the Kaspersky Unified Monitoring and Analysis Platform SIEM system. In a separate article, our colleagues shared how the mode...