CVE-2025-60375

The authentication mechanism in Perfex CRM before 3.3.1 allows attackers to bypass login credentials due to insufficient server-side validation. By sending empty username and password parameters in the login request, an attacker can gain unauthorized access to user accounts, including...

CVE-2025-60375

CVE-2025-60375 affects Perfex CRM versions prior to 3.3.1. The issue is an authentication bypass caused by insufficient server-side validation of login parameters, allowing an attacker to gain unauthorized access (including admin accounts) by submitting empty username and password values. Exploit...

EUVD-2020-21346

Malware in sbrugna...

EUVD-2025-31562

Malicious code in bioql PyPI...

EUVD-2021-27486

Malicious code in bioql PyPI...

EUVD-2025-31564

Malicious code in bioql PyPI...

EUVD-2024-53448

Malicious code in bioql PyPI...

EUVD-2025-31561

Malicious code in bioql PyPI...

EUVD-2025-8702

Malicious code in bioql PyPI...

EUVD-2025-31563

Malicious code in bioql PyPI...

EUVD-2025-9674

Malicious code in bioql PyPI...

EUVD-2024-49440

Malicious code in bioql PyPI...

EUVD-2025-31565

Malicious code in bioql PyPI...

EUVD-2025-31560

Malicious code in bioql PyPI...

CVE-2025-10346

HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameters 'subject' at the endpoint 'knoewledgebase/article'...

CVE-2025-10344

HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameters 'name' and 'clientid' at the endpoint '/projects/project/x'...

CVE-2025-10343

HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameter 'expensename' at the endpoint '/expenses/expense'...

CVE-2025-10342

HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameter 'name' at the endpoint '/subscriptions/create'...

CVE-2025-10345

HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameters 'name' and 'address' at the endpoint 'admin/leads/lead'...

CVE-2025-10341

HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameter 'company' at the endpoint '/clients/client/x...