CVE-2024-50335

CVE-2024-50335: 'Publish Key' फ़ील्ड में प्रमाणित XSS, अनधिकृत व्यवस्थापक उपयोगकर्ता निर्माण की अनुमति देता है सारांश SuiteCRM के Edit Profile पृष्ठ पर 'Publish Key' फ़ील्ड Reflected Cross-Site Scripting XSS के प्रति संवेदनशील है, जो एक हमलावर को दुर्भावनापूर्ण JavaScript कोड इंजेक्ट करने की अनुम...

Malicious code in mahesa-rangi56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8fae9441627ecdaf9bbb32128173eb812dc28f1a14a270e36b38346f3fd835d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2024-44830

Malicious code in bioql PyPI...

PT-2024-34148 · Suitecrm · Suitecrm

Name of the Vulnerable Software and Affected Versions: SuiteCRM versions prior to 7.14.6 SuiteCRM versions prior to 8.7.1 Description: The issue arises due to insufficient input validation and sanitization of the Publish Key field within the SuiteCRM application, allowing an attacker to inject...