CVE-2025-59428

CVE-2025-59428 affects EspoCRM up to version 9.1.8. A combination of stored SVG injection and missing CSRF protection allows an attacker with Knowledge Base edit permissions to cause arbitrary user creation (including admin accounts) by luring an authenticated user to click a malicious SVG link t...

GHSA-99H5-PJCV-GR6V Better Auth: Unauthenticated API key creation through api-key plugin

Summary A critical authentication bypass was identified in the API key creation and update endpoints. An attacker could create or modify API keys for arbitrary users by supplying a victim’s user ID in the request body. Due to a flaw in how the authenticated user was derived, the endpoints could...

EUVD-2018-5401

Malware in sbrugna...

EUVD-2018-5647

Malware in sbrugna...

EUVD-2007-2820

Malware in sbrugna...

EUVD-2008-0401

Malware in sbrugna...

EUVD-2018-5652

Malware in sbrugna...

EUVD-2018-5520

Malware in sbrugna...

EUVD-2018-5481

Malware in sbrugna...

EUVD-2018-5442

Malware in sbrugna...

EUVD-2018-5040

Malware in sbrugna...

EUVD-2018-5516

Malware in sbrugna...

EUVD-2021-16004

Malware in sbrugna...

EUVD-2018-5669

Malware in sbrugna...

EUVD-2018-5590

Malware in sbrugna...

EUVD-2018-5593

Malware in sbrugna...

EUVD-2018-5024

Malware in sbrugna...

EUVD-2018-5414

Malware in sbrugna...

EUVD-2018-5519

Malware in sbrugna...

EUVD-2018-5648

Malware in sbrugna...