EUVD-2026-30967

EspoCRM is an open source customer relationship management application. Versions 9.3.3 and below allow authenticated users to upload SVG attachments through normal attachment-capable fields and later serve those SVG files as top-level inline documents through both the attachment and image entry...

CVE-2022-38845

Cross Site Scripting in Import feature in EspoCRM 7.1.8 allows remote users to run malicious JavaScript in victim s browser via sending crafted csv file containing malicious JavaScript to authenticated user. Any authenticated user importing the crafted CSV file may end up running the malicious...

EUVD-2025-34207

EspoCRM is an open source customer relationship management application. In versions before 9.1.9, a vulnerability allows arbitrary user creation, including administrative accounts, through a combination of stored SVG injection and lack of CSRF protection. An attacker with Knowledge Base edit...

PT-2025-41935

Name of the Vulnerable Software and Affected Versions EspoCRM versions prior to 9.1.9 Description EspoCRM is a customer relationship management application. A flaw allows the creation of arbitrary user accounts, including those with administrative privileges. This is achieved through a combinatio...

EUVD-2019-5566

Malware in sbrugna...

EUVD-2019-5708

Malware in sbrugna...

EUVD-2019-5707

Malware in sbrugna...

EUVD-2019-5709

Malware in sbrugna...

EUVD-2019-5550

Malware in sbrugna...

EUVD-2019-5567

Malware in sbrugna...

EUVD-2019-5710

Malware in sbrugna...

EUVD-2021-26850

Malware in sbrugna...

EUVD-2014-7834

Malware in sbrugna...

EUVD-2014-7835

Malware in sbrugna...

EUVD-2019-5711

Malware in sbrugna...

EUVD-2019-5565

Malware in sbrugna...

EUVD-2019-5549

Malware in sbrugna...

EUVD-2025-11788

Malicious code in bioql PyPI...

EUVD-2023-50912

Malicious code in bioql PyPI...

EUVD-2022-41405

Malicious code in bioql PyPI...