450 matches found
EUVD-2018-18942
Malware in sbrugna...
EUVD-2017-18715
Malware in sbrugna...
EUVD-2017-18671
Malware in sbrugna...
EUVD-2014-9394
Malware in sbrugna...
EUVD-2023-12645
Malicious code in bioql PyPI...
EUVD-2021-28043
Malicious code in bioql PyPI...
EUVD-2021-28042
Malicious code in bioql PyPI...
EUVD-2021-28041
Malicious code in bioql PyPI...
EUVD-2021-28039
Malicious code in bioql PyPI...
ProjectSend < r1720 Improper Authorization
ProjectSend version prior to r1720 is affected by an Improper Authorization vulnerability. An unauthenticated attacker can exploit this issue to access sensitive information and perform unauthorized actions within the application. No source data...
CVE-2023-0607
Cross-site Scripting XSS - Stored in GitHub repository projectsend/projectsend prior to r1606...
CVE-2021-40887
Projectsend version r1295 is affected by a directory traversal vulnerability. Because of lacking sanitization input for files parameter, an attacker can add ../ to move all PHP files or any file on the system that has permissions to /upload/files/ folder...
CVE-2018-7201
CSV Injection was discovered in ProjectSend before r1053, affecting victims who import the data into Microsoft Excel...
CVE-2018-7202
An issue was discovered in ProjectSend before r1053. XSS exists in the "Name" field on the My Account page...
CVE-2019-11378
An issue was discovered in ProjectSend r1053. upload-process-form.php allows finishedfiles=../ directory traversal. It is possible for users to read arbitrary files and potentially access the supporting database, delete arbitrary files, access user passwords, or run arbitrary code...
CVE-2017-20101
A vulnerability, which was classified as problematic, was found in ProjectSend r754. This affects an unknown part of the file process.php?do=zipdownload. The manipulation of the argument client/file leads to information disclosure. It is possible to initiate the attack remotely...
CVE-2024-11680
ProjectSend versions prior to r1720 are affected by an improper authentication vulnerability. Remote, unauthenticated attackers can exploit this flaw by sending crafted HTTP requests to options.php, enabling unauthorized modification of the application's configuration. Successful exploitation...
ProjectSend Detection
Binary data projectsendprojectsenddetect.nbin...
CISA Warns of Active Exploitation of Flaws in Zyxel, ProjectSend, and CyberPanel
The U.S. Cybersecurity and Infrastructure Security Agency CISA added multiple security flaws affecting products from Zyxel, North Grid Proself, ProjectSend, and CyberPanel to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The list of...
