SuiteCRM Unauthenticated Graphql Introspection

Graphql Introspection is enabled without authentication, exposing the scheme defining all object types, arguments, and functions. id: CVE-2023-47643 info: name: SuiteCRM Unauthenticated Graphql Introspection author: isacaya severity: medium description: | Graphql Introspection is enabled without...

CVE-2022-23940

CVE-2022-23940 PoC for CVE-2022-23940 aka SCRMBT-187 - Authenticated Remote Code Execution through Scheduled Reports in SuiteCRM = 8.0.0. Defaults to False --help Show this message and exit. https://github.com/manuelz120/CVE-2022-23940...

EUVD-2018-13358

Malware in sbrugna...

EUVD-2018-7477

Malware in sbrugna...

EUVD-2019-4840

Malware in sbrugna...

EUVD-2023-58382

Malicious code in bioql PyPI...

EUVD-2023-58379

Malicious code in bioql PyPI...

EUVD-2023-57666

Malicious code in bioql PyPI...

EUVD-2023-57667

Malicious code in bioql PyPI...

EUVD-2023-58383

Malicious code in bioql PyPI...

EUVD-2023-57669

Malicious code in bioql PyPI...

EUVD-2022-15817

Malicious code in bioql PyPI...

EUVD-2023-58381

Malicious code in bioql PyPI...

EUVD-2023-23325

Malicious code in bioql PyPI...

EUVD-2022-15818

Malicious code in bioql PyPI...

EUVD-2023-58385

Malicious code in bioql PyPI...

EUVD-2023-58386

Malicious code in bioql PyPI...

CVE-2023-6125

Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...

CVE-2023-6127

Unrestricted Upload of File with Dangerous Type in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...

CVE-2023-6126

Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...