215 matches found
CVE-2022-50911
...
PT-2026-2387
Name of the Vulnerable Software and Affected Versions Bitrix24 affected versions not specified Description A logged-in attacker can execute arbitrary system commands through the PHP command line admin interface, leading to remote code execution. The attacker leverages this by sending crafted POST...
Bitrix24 安全漏洞
Bitrix24 is a suite of enterprise social platforms from Bitrix USA. The platform includes features such as online communication, calendar management and CRM Customer Relationship Management. A security vulnerability exists in Bitrix24, which originates from authenticated remote code execution, an...
CVE-2024-34891
Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read Exchange account passwords via HTTP GET request...
CVE-2024-34887
Insufficiently protected credentials in AD/LDAP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send AD/LDAP administrators account passwords to an arbitrary server via HTTP POST request...
CVE-2024-34883
Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allow remote administrators to read proxy-server accounts passwords via HTTP GET request...
Exploit for CVE-2025-67886
CVE-2025-67886 Bi...
📄 Bitrix24 25.100.300 Remote Code Execution
Bitrix24 versions 25.100.300 and below have a vulnerability that is located within the Translate Module, which allows users to upload and extract archive files into a temporary directory. However, the application fails to properly verify the contents of these archives before extracting them. This...
EUVD-2020-5977
Malware in sbrugna...
EUVD-2020-5734
Malware in sbrugna...
EUVD-2020-20690
Malware in sbrugna...
EUVD-2023-23939
Malicious code in bioql PyPI...
EUVD-2023-23936
Malicious code in bioql PyPI...
EUVD-2023-23937
Malicious code in bioql PyPI...
EUVD-2024-47640
Malicious code in bioql PyPI...
EUVD-2023-23940
Malicious code in bioql PyPI...
EUVD-2023-23938
Malicious code in bioql PyPI...
EUVD-2023-23943
Malicious code in bioql PyPI...
CVE-2023-1717
Prototype pollution in bitrix/templates/bitrix24/components/bitrix/menu/leftvertical/script.js in Bitrix24 22.0.300 allows remote attackers to execute arbitrary JavaScript code in the victim’s browser, and possibly execute arbitrary PHP code on the server if the victim has administrator privilege...