744 matches found
CVE-2025-63293
FairSketch Rise Ultimate Project Manager & CRM 3.9.4 is vulnerable to Insecure Permissions. A remote authenticated user can append comments or upload attachments to tickets for which they lack view or edit authorization, due to missing authorization checks in the ticketing/commenting API...
CVE-2025-63293
FairSketch Rise Ultimate Project Manager & CRM version 3.9.4 is vulnerable to Insecure Permissions due to a lack of authorization checks in the ticketing/commenting API . A remote authenticated user can exploit this flaw to append comments or upload attachments to tickets for which they lack the ...
FairSketch Rise Ultimate Project Manager and CRM 安全漏洞
FairSketch Rise Ultimate Project Manager and CRM is a team management and customer relationship management system from FairSketch. A security vulnerability exists in FairSketch Rise Ultimate Project Manager and CRM version 3.9.4, which stems from a lack of authorization checking in the ticket...
CVE-2025-63293: Missing Authorization
FairSketch Rise Ultimate Project Manager & CRM 3.9.4 is vulnerable to Insecure Permissions. A remote authenticated user can append comments or upload attachments to tickets for which they lack view or edit authorization, due to missing authorization checks in the ticketing/commenting API...
CVE-2025-60378
Stored HTML injection in RISE Ultimate Project Manager & CRM allows authenticated users to inject arbitrary HTML into invoices and messages. Injected content renders in emails, PDFs, and messaging/chat modules sent to clients or team members, enabling phishing, credential theft, and business emai...
CVE-2025-60378
Stored HTML injection in RISE Ultimate Project Manager & CRM allows authenticated users to inject arbitrary HTML into invoices and messages. Injected content renders in emails, PDFs, and messaging/chat modules sent to clients or team members, enabling phishing, credential theft, and business emai...
CVE-2025-60378
Stored HTML injection in RISE Ultimate Project Manager & CRM allows authenticated users to inject arbitrary HTML into invoices and messages. Injected content renders in emails, PDFs, and messaging/chat modules sent to clients or team members, enabling phishing, credential theft, and business emai...
CVE-2025-60378
A stored HTML injection vulnerability exists in RISE - Ultimate Project Manager & CRM (versions prior to 3.9.4 ) caused by improper neutralization of input during web page generation. Authenticated users can inject arbitrary HTML into invoice line items , client memos , and messaging modules . Th...
CVE-2025-60378
Stored HTML injection in RISE Ultimate Project Manager & CRM allows authenticated users to inject arbitrary HTML into invoices and messages. Injected content renders in emails, PDFs, and messaging/chat modules sent to clients or team members, enabling phishing, credential theft, and business emai...
CVE-2025-60378: Improper Neutralization of Input During Web Page Generation
Stored HTML injection in RISE Ultimate Project Manager & CRM allows authenticated users to inject arbitrary HTML into invoices and messages. Injected content renders in emails, PDFs, and messaging/chat modules sent to clients or team members, enabling phishing, credential theft, and business emai...
EUVD-2021-23402
Malware in sbrugna...
EUVD-2018-10146
Malware in sbrugna...
EUVD-2017-2816
Malware in sbrugna...
EUVD-2017-9141
Malware in sbrugna...
EUVD-2017-2815
Malware in sbrugna...
EUVD-2019-8572
Malware in sbrugna...
EUVD-2010-5182
Malware in sbrugna...
EUVD-2025-9774
Malicious code in bioql PyPI...