CVE-2025-64489 SuiteCRM: Privilege Escalation via Improper Session Invalidation and Inactive User Bypass

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Versions 7.14.7 and prior, 8.0.0-beta.1 through 8.9.0 contain a privilege escalation vulnerability where user sessions are not invalidated upon account deactivation. An inactive user with an...

CVE-2025-64489 SuiteCRM: Privilege Escalation via Improper Session Invalidation and Inactive User Bypass

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Versions 7.14.7 and prior, 8.0.0-beta.1 through 8.9.0 contain a privilege escalation vulnerability where user sessions are not invalidated upon account deactivation. An inactive user with an...

CVE-2025-64386

The equipment grants a JWT token for each connection in the timeline, but during an active valid session, a hijacking of the token can be done. This will allow an attacker with the token modify parameters of security, access or even steal the session without the legitimate and active session...

CVE-2025-64386 HIJACKING OF THE TOKEN AND GAINING ACCESS

The equipment grants a JWT token for each connection in the timeline, but during an active valid session, a hijacking of the token can be done. This will allow an attacker with the token modify parameters of security, access or even steal the session without the legitimate and active session...

EUVD-2018-8952

Malware in sbrugna...

EUVD-2016-9982

Malware in sbrugna...

EUVD-2017-11825

Malware in sbrugna...

EUVD-2016-7478

Malware in sbrugna...

EUVD-2020-27370

Malware in sbrugna...

EUVD-2016-7499

Malware in sbrugna...

EUVD-2020-29806

Malware in sbrugna...

EUVD-2021-14111

Malware in sbrugna...

EUVD-2024-31913

Malicious code in bioql PyPI...

EUVD-2025-2767

Malicious code in bioql PyPI...

EUVD-2024-39387

Malicious code in bioql PyPI...

EUVD-2023-45609

Malicious code in bioql PyPI...

EUVD-2023-35760

Malicious code in bioql PyPI...

EUVD-2021-29059

Malicious code in bioql PyPI...

CVE-2025-42945

SAP NetWeaver Application Server ABAP has HTML injection vulnerability. Due to this, an attacker could craft a URL with malicious script as payload and trick a victim with active user session into executing it. Upon successful exploit, this vulnerability could lead to limited access to data or it...

CVE-2025-42945 HTML Injection vulnerability in SAP NetWeaver Application Server ABAP

SAP NetWeaver Application Server ABAP has HTML injection vulnerability. Due to this, an attacker could craft a URL with malicious script as payload and trick a victim with active user session into executing it. Upon successful exploit, this vulnerability could lead to limited access to data or it...