Detecting DLL hijacking with machine learning: real-world cases

Introduction Our colleagues from the AI expertise center recently developed a machine-learning model that detects DLL-hijacking attacks. We then integrated this model into the Kaspersky Unified Monitoring and Analysis Platform SIEM system. In a separate article, our colleagues shared how the mode...

EUVD-2024-22205

Malicious code in bioql PyPI...

EUVD-2024-52990

Malicious code in bioql PyPI...

EUVD-2022-5054

Malicious code in bioql PyPI...

EUVD-2023-45860

Malicious code in bioql PyPI...

EUVD-2024-31325

Malicious code in bioql PyPI...

EUVD-2025-10681

Malicious code in bioql PyPI...

EUVD-2024-33521

Malicious code in bioql PyPI...

EUVD-2023-41764

Malicious code in bioql PyPI...

EUVD-2025-28466

Malicious code in bioql PyPI...

EUVD-2024-45478

Malicious code in bioql PyPI...

EUVD-2025-14333

Malicious code in bioql PyPI...

EUVD-2025-14716

Malicious code in bioql PyPI...

EUVD-2025-31560

Malicious code in bioql PyPI...

CVE-2025-10346

HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameters 'subject' at the endpoint 'knoewledgebase/article'...

CVE-2025-10346

HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameters 'subject' at the endpoint 'knoewledgebase/article'...

CVE-2025-10346 HTML injection in Perfex CRM

HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameters 'subject' at the endpoint 'knoewledgebase/article'...

CVE-2025-10346

CVE-2025-10346 affects Perfex CRM v3.2.1 with a stored HTML injection in the knowledge_base/article endpoint. The vulnerability arises from insufficient input validation of the subject parameter, allowing an attacker to inject arbitrary HTML via a POST request. Multiple sources corroborate this: ...

CVE-2025-10346 HTML injection in Perfex CRM

HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameters 'subject' at the endpoint 'knoewledgebase/article'...

Perfex CRM cross-site scripting vulnerability

Perfex CRM is a customer relationship management software from Perfex CRM open source. It is used to manage customers, projects and create invoices in the cloud. A cross-site scripting vulnerability exists in Perfex CRM version 3.2.1, which stems from insufficient validation of user input for the...