EUVD-2022-3196

Malicious code in bioql PyPI...

EUVD-2022-50617

Malicious code in bioql PyPI...

EUVD-2025-24539

Malicious code in bioql PyPI...

EUVD-2025-26573

Malicious code in bioql PyPI...

EUVD-2024-43362

Malicious code in bioql PyPI...

EUVD-2022-50622

Malicious code in bioql PyPI...

EUVD-2025-3444

Malicious code in bioql PyPI...

EUVD-2025-3416

Malicious code in bioql PyPI...

EUVD-2025-8198

Malicious code in bioql PyPI...

EUVD-2025-28121

Malicious code in bioql PyPI...

EUVD-2024-33439

Malicious code in bioql PyPI...

Cross Site Scripting (XSS)

mautic/core is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to unsanitized user-supplied input in the “Tags” field of the /s/ajax?action=lead:addLeadTags endpoint being reflected in the server response, which allows an attacker to execute arbitrary JavaScript in the victim’s...

Daniel Miessler on the AI Attack/Defense Balance

His conclusion: Context wins Basically whoever can see the most about the target, and can hold that picture in their mind the best, will be best at finding the vulnerabilities the fastest and taking advantage of them. Or, as the defender, applying patches or mitigations the fastest. And if you’re...

CVE-2025-10345

HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameters 'name' and 'address' at the endpoint 'admin/leads/lead'...

CVE-2025-10345

HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameters 'name' and 'address' at the endpoint 'admin/leads/lead'...

CVE-2025-10345 HTML injection in Perfex CRM

HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameters 'name' and 'address' at the endpoint 'admin/leads/lead'...

CVE-2025-10345

CVE-2025-10345 affects Perfex CRM in version 3.2.1. The issue is a stored HTML injection caused by insufficient validation of user input in the POST request to /admin/leads/lead, with malicious HTML supplied via the name and address parameters. Impact is described as stored HTML injection; exploi...

PT-2025-39818

Name of the Vulnerable Software and Affected Versions Perfex CRM version 3.2.1 Description An HTML injection issue exists in Perfex CRM version 3.2.1. This is due to insufficient validation of user-supplied data. The issue occurs when sending a POST request to the /admin/leads/lead endpoint with...

roncoo-pay 授权问题漏洞

roncoo-pay roncoo payment system is an open source Internet payment system by Lead Class Network RonCoo. An authorization issue vulnerability exists in roncoo-pay, which stems from improper authorization of unknown functions in the file /user/info/lookupList, which could lead to a remote attack...

Salesforce Patches Critical ForcedLeak Bug Exposing CRM Data via AI Prompt Injection

Cybersecurity researchers have disclosed a critical flaw impacting Salesforce Agentforce, a platform for building artificial intelligence AI agents, that could allow attackers to potentially exfiltrate sensitive data from its customer relationship management CRM tool by means of an indirect promp...