openCRX-CVE-2020-7378

openCRX-CVE-2020-7378 Toma de control de cuenta no autenticada Explota la vulnerabilidad de restablecimiento de contraseña en OpenCRX, CVE-2020-7378. Una implementación sigilosa en Python para CVE-2020-7378 El exploit se debe a que los desarrolladores usaron la clase Random de java.util.Random pa...

CVE-2020-7378

CVE-2020-7378 – Exploit de token de restablecimiento de contraseña predecible y XXE en OpenCRX Este repositorio contiene un exploit de prueba de concepto PoC combinado para CVE-2020-7378 , una vulnerabilidad crítica en OpenCRX versiones hasta 5.0-20200717 inclusive. El exploit encadena dos...

CVE-2023-40817

OpenCRX version 5.2.0 is vulnerable to HTML injection via the Product Configuration Name Field...

CVE-2023-40815

OpenCRX version 5.2.0 is vulnerable to HTML injection via the Category Creation Name Field...

CVE-2023-40812

OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Group Name Field...

CVE-2023-40816

OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field...

CVE-2023-40809

OpenCRX version 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number...

EUVD-2020-28505

Malware in sbrugna...

EUVD-2021-2111

Malware in sbrugna...

EUVD-2022-7113

Malicious code in bioql PyPI...

EUVD-2023-2999

Malicious code in bioql PyPI...

EUVD-2023-2952

Malicious code in bioql PyPI...

EUVD-2023-2934

Malicious code in bioql PyPI...

EUVD-2023-2861

Malicious code in bioql PyPI...

EUVD-2023-2975

Malicious code in bioql PyPI...

EUVD-2023-3017

Malicious code in bioql PyPI...

EUVD-2023-2889

Malicious code in bioql PyPI...

EUVD-2023-2792

Malicious code in bioql PyPI...

EUVD-2023-2968

Malicious code in bioql PyPI...

CVE-2023-27151

openCRX 5.2.0 was discovered to contain an HTML injection vulnerability for Search Criteria-Activity Number in the Saved Search Activity via the Name, Description, or Activity Number field...