6377 matches found
CVE-2025-60375
The authentication mechanism in Perfex CRM before 3.3.1 allows attackers to bypass login credentials due to insufficient server-side validation. By sending empty username and password parameters in the login request, an attacker can gain unauthorized access to user accounts, including...
CVE-2025-60375
The authentication mechanism in Perfex CRM before 3.3.1 allows attackers to bypass login credentials due to insufficient server-side validation. By sending empty username and password parameters in the login request, an attacker can gain unauthorized access to user accounts, including...
CVE-2025-60375
The authentication mechanism in Perfex CRM before 3.3.1 allows attackers to bypass login credentials due to insufficient server-side validation. By sending empty username and password parameters in the login request, an attacker can gain unauthorized access to user accounts, including...
PT-2025-41488
Name of the Vulnerable Software and Affected Versions Perfex CRM versions prior to 3.3.1 Description The authentication process in Perfex CRM has a flaw where server-side validation is inadequate. This allows attackers to bypass normal login procedures by submitting empty values for the username...
CVE-2025-60375
Perfex CRM versions prior to 3.3.1 are vulnerable to an authentication bypass due to insufficient server-side validation of the login request parameters. An attacker can gain unauthorized access to user accounts, including administrative accounts , by sending a login request with empty username a...
SUSE CVE-2023-53646
In the Linux kernel, the following vulnerability has been resolved: drm/i915/perf: add sentinel to xehpoabcounters Arrays passed to reginrangetable should end with empty record. The patch solves KASAN detected bug with signature: BUG: KASAN: global-out-of-bounds in...
BELL-CVE-2023-53674
Bulletin has no description...
idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded
A flaw was found in idna crate. This vulnerability allows hostname spoofing and potential privilege escalation via specially crafted Punycode labels that render as ASCII or empty labels, leading to incorrect equality comparisons during hostname validation...
BELL-CVE-2023-53602
Bulletin has no description...
BELL-CVE-2023-53598
Bulletin has no description...
BELL-CVE-2023-53553
Bulletin has no description...
EUVD-2005-0853
Malware in sbrugna...
EUVD-2002-0283
Malware in sbrugna...
EUVD-2019-9347
Malware in sbrugna...
EUVD-2006-3751
Malware in sbrugna...
EUVD-2010-1268
Malware in sbrugna...
EUVD-2009-5027
Malware in sbrugna...
EUVD-2021-14535
Malware in sbrugna...