5197 matches found
CVE-2025-60375
The authentication mechanism in Perfex CRM before 3.3.1 allows attackers to bypass login credentials due to insufficient server-side validation. By sending empty username and password parameters in the login request, an attacker can gain unauthorized access to user accounts, including...
PT-2025-41488
Name of the Vulnerable Software and Affected Versions Perfex CRM versions prior to 3.3.1 Description The authentication process in Perfex CRM has a flaw where server-side validation is inadequate. This allows attackers to bypass normal login procedures by submitting empty values for the username...
CVE-2025-60375
The authentication mechanism in Perfex CRM before 3.3.1 allows attackers to bypass login credentials due to insufficient server-side validation. By sending empty username and password parameters in the login request, an attacker can gain unauthorized access to user accounts, including...
CVE-2025-60375
CVE-2025-60375 affects Perfex CRM versions prior to 3.3.1. The issue is an authentication bypass caused by insufficient server-side validation of login parameters, allowing an attacker to gain unauthorized access (including admin accounts) by submitting empty username and password values. Exploit...
CVE-2025-60375
The authentication mechanism in Perfex CRM before 3.3.1 allows attackers to bypass login credentials due to insufficient server-side validation. By sending empty username and password parameters in the login request, an attacker can gain unauthorized access to user accounts, including...
SUSE CVE-2023-53646
In the Linux kernel, the following vulnerability has been resolved: drm/i915/perf: add sentinel to xehpoabcounters Arrays passed to reginrangetable should end with empty record. The patch solves KASAN detected bug with signature: BUG: KASAN: global-out-of-bounds in...
BELL-CVE-2023-53674
Bulletin has no description...
idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded
A flaw was found in idna crate. This vulnerability allows hostname spoofing and potential privilege escalation via specially crafted Punycode labels that render as ASCII or empty labels, leading to incorrect equality comparisons during hostname validation...
BELL-CVE-2023-53602
Bulletin has no description...
BELL-CVE-2023-53598
Bulletin has no description...
BELL-CVE-2023-53553
Bulletin has no description...
EUVD-2005-0383
Malware in sbrugna...
EUVD-2014-4590
Malware in sbrugna...
EUVD-2004-2382
Malware in sbrugna...
EUVD-2016-9426
Malware in sbrugna...
EUVD-2018-0868
Malware in sbrugna...
EUVD-2015-5847
Malware in sbrugna...
EUVD-2011-2800
Malware in sbrugna...