21567 matches found
CVE-2025-60378
Stored HTML injection in RISE Ultimate Project Manager & CRM allows authenticated users to inject arbitrary HTML into invoices and messages. Injected content renders in emails, PDFs, and messaging/chat modules sent to clients or team members, enabling phishing, credential theft, and business emai...
EUVD-2025-33722
Stored HTML injection in RISE Ultimate Project Manager & CRM allows authenticated users to inject arbitrary HTML into invoices and messages. Injected content renders in emails, PDFs, and messaging/chat modules sent to clients or team members, enabling phishing, credential theft, and business emai...
RISE Ultimate Project Manager & CRM 安全漏洞
RISE Ultimate Project Manager & CRM is a project management system from RISE. A security vulnerability exists in RISE Ultimate Project Manager & CRM that originates from an authenticated user being able to inject arbitrary HTML into invoices and messages, which could lead to phishing attacks,...
CVE-2025-60378
Stored HTML injection in RISE Ultimate Project Manager & CRM allows authenticated users to inject arbitrary HTML into invoices and messages. Injected content renders in emails, PDFs, and messaging/chat modules sent to clients or team members, enabling phishing, credential theft, and business emai...
Linux Distros Unpatched Vulnerability : CVE-2025-61640
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is...
Discord warns users after data stolen in third-party breach
Popular social platform Discord has suffered a data breach—though technically, it wasn’t Discord itself that was hacked. A third-party customer support provider was compromised, allowing attackers to access Discord’s user data. Either way, it’s Discord users who feel the impact. The breach, which...
CVE-2025-10162 OrderConvo < 14 - Unauthenticated Arbitrary File Read
The Admin and Customer Messages After Order for WooCommerce: OrderConvo WordPress plugin before 14 does not validate the path of files to be downloaded, which could allow unauthenticated attacker to read/download arbitrary files via a path traversal attack...
EUVD-2020-3989
Malware in sbrugna...
EUVD-2011-3710
Malware in sbrugna...
EUVD-2014-3275
Malware in sbrugna...
EUVD-2020-3153
Malware in sbrugna...
EUVD-2018-12529
Malware in sbrugna...
EUVD-2006-6869
Malware in sbrugna...
EUVD-2007-1599
Malware in sbrugna...
EUVD-2019-5500
Malware in sbrugna...
EUVD-2002-2209
Malware in sbrugna...
EUVD-2002-0497
Malware in sbrugna...
EUVD-2016-1331
Malware in sbrugna...