Lucene search
+L

1030 matches found

Positive Technologies
Positive Technologies
added 2024/05/14 12:00 a.m.14 views

PT-2024-12025 · Sourcecodester · Sourcecodester Customer Relationship Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Customer Relationship Management System version 1.0 Description: The issue allows an attacker to execute arbitrary code. This can be achieved via the company or query parameters in a Cross Site Scripting vulnerability, o...

5.4CVSS7AI score0.00639EPSS
SaveExploits3References9
BDU FSTEC
BDU FSTEC
added 2024/05/13 12:00 a.m.13 views

The vulnerability of the index.php?module=users/registration&action=save component of the Rukovoditel customer relationship management system allows a attacker to perform XSS attacks.

The vulnerability of the index.php?module=users/registration&action=save component of the Customer Relationship Management system’s administration interface lies in the lack of protection for the website structure when processing the userphoto parameter. Exploiting this vulnerability allows an...

4CVSS5.4AI score0.00589EPSS
SaveExploits1References4Affected Software1
Malwarebytes
Malwarebytes
added 2024/04/17 7:54 p.m.35 views

Should you share your location with your partner?

Every relationship has its disagreements. Who takes out the trash and washes the dishes? Who plans the meals and writes out the grocery list? And when is it okay to start tracking one another’s location? Location sharing is becoming the norm between romantic partners—50% of people valued location...

6.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/03/29 12:00 a.m.18 views

PT-2024-23374 · Crm Perks · Crm Perks Forms

Name of the Vulnerable Software and Affected Versions: CRM Perks Forms versions 1.1.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means that an attacker can inject...

6.5CVSS9.2AI score0.00336EPSS
SaveExploits0References7
OSV
OSV
added 2024/03/25 12:00 a.m.9 views

CVE-2024-28435

The CRM platform Twenty version 0.3.0 is vulnerable to SSRF via file upload...

5.4CVSS7AI score
SaveExploits0References4
NVD
NVD
added 2024/03/21 2:52 a.m.34 views

CVE-2024-24818

EspoCRM is an Open Source Customer Relationship Management software. An attacker can inject arbitrary IP or domain in "Password Change" page and redirect victim to malicious page that could lead to credential stealing or another attack. This vulnerability is fixed in 8.1.2...

5.9CVSS5.7AI score0.00615EPSS
SaveExploits1References2
Prion
Prion
added 2024/03/14 10:51 p.m.54 views

Default credentials

EspoCRM is an Open Source Customer Relationship Management software. An attacker can inject arbitrary IP or domain in "Password Change" page and redirect victim to malicious page that could lead to credential stealing or another attack. This vulnerability is fixed in 8.1.2...

7.3AI score0.00615EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2024/03/05 12:00 a.m.13 views

IDURAR ERP/CRM Security Breach

IDURAR ERP/CRM is an open source content management system by Salah Eddine Lalami, an individual developer. A security vulnerability exists in IDURAR ERP/CRM v2.0.0, which stems from a path traversal vulnerability that can be exploited by an attacker to expose sensitive files via the download...

7.5CVSS6.7AI score0.00869EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/03/03 12:00 a.m.10 views

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution offers multiple payment methods, SMS alerts, and product image zoom, among other features. A security vulnerability previously existed in PrestaShop Account Manager - Sales Representative &...

7.5CVSS6.9AI score0.0055EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/02/13 12:00 a.m.13 views

The vulnerability of the php-scrm/login.php component of the Simple Customer Relationship Management System web application, which allows a hacker to execute arbitrary SQL queries against the database.

The vulnerability of the php-scrm/login.php component in the Simple Customer Relationship Management System web application is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries against the databa...

10CVSS7.7AI score0.00929EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
added 2024/01/23 12:00 a.m.14 views

Huawei HarmonyOS and EMUI Trusted Relationship Inaccuracy Vulnerability (CNVD-2025-29310)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. Huawei HarmonyOS and EMUI suffer from a Trusted...

7.5CVSS6.9AI score0.00319EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/01/23 12:00 a.m.14 views

Huawei HarmonyOS and EMUI Trusted Relationship Inaccuracy Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. Huawei HarmonyOS and EMUI suffer from a Trusted...

7.5CVSS6.9AI score0.00173EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/01/23 12:00 a.m.14 views

Huawei HarmonyOS and EMUI Trusted Relationship Inaccuracy Vulnerability (CNVD-2025-29309)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. Huawei HarmonyOS and EMUI suffer from a Trusted...

7.5CVSS6.9AI score0.00319EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/01/05 12:00 a.m.11 views

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. Huawei HarmonyOS and EMUI suffer from a Trusted...

7.5CVSS6.7AI score0.00319EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/01/05 12:00 a.m.13 views

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. Huawei HarmonyOS and EMUI suffer from a Trusted...

7.5CVSS6.7AI score0.00319EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/01/05 12:00 a.m.13 views

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. Huawei HarmonyOS and EMUI suffer from a Trusted...

7.5CVSS6.7AI score0.00173EPSS
SaveExploits0References5
Rapid7 Blog
Rapid7 Blog
added 2023/12/11 8:59 p.m.21 views

Living our Values and Leveraging Diverse Skill Sets: How Jonathan Atwood Built a Successful Career as a Customer Advisor at Rapid7

At Rapid7, our Customer Advisors play a pivotal role at ensuring our customers understand their threat landscape – and feel confident in their security programs. By collaborating across various internal teams, strengthening customer relationships, and proactively seeking solutions and advocating...

6.7AI score
SaveExploits0
Prion
Prion
added 2023/12/05 9:15 p.m.21 views

Server side request forgery (ssrf)

EspoCRM is an Open Source CRM Customer Relationship Management software. In affected versions there is Server-Side Request Forgery SSRF vulnerability via the upload image from url api. Users who have access to the /Attachment/fromImageUrl endpoint can specify URL to point to an internal host. Eve...

4CVSS6.9AI score0.00358EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2023/12/05 8:55 p.m.99 views

CVE-2023-46736

CVE-2023-46736 affects EspoCRM, with a Server-Side Request Forgery (SSRF) vulnerability in the image URL upload flow via the path “/Attachment/fromImageUrl”. The flaw allows an attacker with access to that endpoint to specify an internal URL, bypass content-type checks via redirects, and potentia...

6.5CVSS5.8AI score0.00358EPSS
SaveExploits0References3Affected Software1
Rapid7 Blog
Rapid7 Blog
added 2023/12/05 4:00 p.m.16 views

A Trusted Voice in a Crowded Market: Meet Joanne Guariglia, Senior Channel Account Manager at Rapid7

When you’re a seller, it’s important to represent a reputable brand and products you can stand behind. For many companies, their partners act as an extension of the sales team to help identify and engage new customers. As a Senior Channel Account Manager, Joanne Guariglia shares what she loves mo...

7.2AI score
SaveExploits0
Rows per page
Query Builder