EUVD-2026-67225

Unrestricted Upload of File with Dangerous Type in the product photo upload in Roskus Prospero Flow CRM before 5.16.0 allows an authenticated user holding the create product permission routine Seller role to execute arbitrary JavaScript in the application origin. The photo validation rule...

Threat Outbreak Alert: Fake Product Photo Attachment Notification Email Messages on March 1, 2014

Medium Alert ID: 33143 First Published: 2014 March 3 15:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product photo attachment for the recipient. The text in the email message attempts to convince the recipient to...