CVE-2025-59428 EspoCRM allows arbitrary user creation via stored SVG injection and CSRF

EspoCRM is an open source customer relationship management application. In versions before 9.1.9, a vulnerability allows arbitrary user creation, including administrative accounts, through a combination of stored SVG injection and lack of CSRF protection. An attacker with Knowledge Base edit...

GHSA-99H5-PJCV-GR6V Better Auth: Unauthenticated API key creation through api-key plugin

Summary A critical authentication bypass was identified in the API key creation and update endpoints. An attacker could create or modify API keys for arbitrary users by supplying a victim’s user ID in the request body. Due to a flaw in how the authenticated user was derived, the endpoints could...

EUVD-2018-5647

Malware in sbrugna...

EUVD-2007-2820

Malware in sbrugna...

EUVD-2008-0401

Malware in sbrugna...

EUVD-2018-5144

Malware in sbrugna...

EUVD-2018-5652

Malware in sbrugna...

EUVD-2018-5520

Malware in sbrugna...

EUVD-2018-5481

Malware in sbrugna...

EUVD-2018-5442

Malware in sbrugna...

EUVD-2018-5040

Malware in sbrugna...

EUVD-2018-5516

Malware in sbrugna...

EUVD-2021-16004

Malware in sbrugna...

EUVD-2018-5590

Malware in sbrugna...

EUVD-2018-5593

Malware in sbrugna...

EUVD-2018-5024

Malware in sbrugna...

EUVD-2018-11504

Malware in sbrugna...

EUVD-2018-5111

Malware in sbrugna...

EUVD-2018-5440

Malware in sbrugna...

EUVD-2018-5411

Malware in sbrugna...