185 matches found
Perfex CRM 安全漏洞
Perfex CRM is a customer relationship management software from Perfex CRM open source. It is used to manage customers, projects and create invoices in the cloud. A security vulnerability exists in Perfex CRM version 3.3.1 that stems from uncleaned user input and could lead to an HTML injection...
EUVD-2025-33558
The authentication mechanism in Perfex CRM before 3.3.1 allows attackers to bypass login credentials due to insufficient server-side validation. By sending empty username and password parameters in the login request, an attacker can gain unauthorized access to user accounts, including...
CVE-2025-60375
The authentication mechanism in Perfex CRM before 3.3.1 allows attackers to bypass login credentials due to insufficient server-side validation. By sending empty username and password parameters in the login request, an attacker can gain unauthorized access to user accounts, including...
PT-2025-41488
Name of the Vulnerable Software and Affected Versions Perfex CRM versions prior to 3.3.1 Description The authentication process in Perfex CRM has a flaw where server-side validation is inadequate. This allows attackers to bypass normal login procedures by submitting empty values for the username...
Perfex CRM 安全漏洞
Perfex CRM is a customer relationship management software from Perfex CRM open source. It is used to manage customers, projects and create invoices in the cloud. A security vulnerability exists in Perfex CRM versions prior to 3.3.1, which stems from insufficient server-side authentication and cou...
CVE-2025-60375: Authentication Bypass by Alternate Name
The authentication mechanism in Perfex CRM before 3.3.1 allows attackers to bypass login credentials due to insufficient server-side validation. By sending empty username and password parameters in the login request, an attacker can gain unauthorized access to user accounts, including...
CVE-2025-60375
The authentication mechanism in Perfex CRM before 3.3.1 allows attackers to bypass login credentials due to insufficient server-side validation. By sending empty username and password parameters in the login request, an attacker can gain unauthorized access to user accounts, including...
CVE-2025-60375
The authentication mechanism in Perfex CRM before 3.3.1 allows attackers to bypass login credentials due to insufficient server-side validation. By sending empty username and password parameters in the login request, an attacker can gain unauthorized access to user accounts, including...
CVE-2025-60375
Perfex CRM versions prior to 3.3.1 are vulnerable to an authentication bypass due to insufficient server-side validation of the login request parameters. An attacker can gain unauthorized access to user accounts, including administrative accounts , by sending a login request with empty username a...
EUVD-2020-21346
Malware in sbrugna...
EUVD-2021-27486
Malicious code in bioql PyPI...
EUVD-2025-31562
Malicious code in bioql PyPI...
EUVD-2025-31561
Malicious code in bioql PyPI...
EUVD-2025-31564
Malicious code in bioql PyPI...
EUVD-2024-53448
Malicious code in bioql PyPI...
EUVD-2025-8702
Malicious code in bioql PyPI...
EUVD-2025-31563
Malicious code in bioql PyPI...
EUVD-2025-31565
Malicious code in bioql PyPI...