EUVD-2019-7718

Malware in sbrugna...

EUVD-2020-9327

Malware in sbrugna...

EUVD-2020-9326

Malware in sbrugna...

EUVD-2008-2042

Malware in sbrugna...

EUVD-2010-0496

Malware in sbrugna...

EUVD-2020-28597

Malware in sbrugna...

EUVD-2009-2963

Malware in sbrugna...

EUVD-2025-18782

Malicious code in bioql PyPI...

EUVD-2023-39806

Malicious code in bioql PyPI...

EUVD-2023-39804

Malicious code in bioql PyPI...

EUVD-2023-39805

Malicious code in bioql PyPI...

EUVD-2023-39803

Malicious code in bioql PyPI...

EUVD-2023-50981

Malicious code in bioql PyPI...

EUVD-2023-50982

Malicious code in bioql PyPI...

EUVD-2024-54779

Malicious code in bioql PyPI...

SugarCRM 14.0.0 - SSRF/Code Injection

Exploit Title : SugarCRM 14.0.0 - SSRF/Code Injection Author: Egidio Romano aka EgiX Email : [email protected] Software Link: https://www.sugarcrm.com Affected Versions: All commercial versions before 13.0.4 and 14.0.1. CVE Reference: CVE-2024-58258 Vulnerability Description: User input passed...

CVE-2024-58258

SugarCRM before 13.0.4 and 14.x before 14.0.1 allows SSRF in the API module because a limited type of code injection can occur...

📄 SugarCRM 14.0.0 Code Injection / SSRF / File Read

SugarCRM versions 14.0.0 and below suffer from a LESS code injection vulnerability. User input passed through GET parameters to the /css/preview REST API endpoint is not properly sanitized before parsing it as LESS code. This can be exploited by remote, unauthenticated attackers to inject and...

CVE-2024-58258

SugarCRM before 13.0.4 and 14.x before 14.0.1 allows SSRF in the API module because a limited type of code injection can occur...

CVE-2024-58258

SugarCRM has a code injection flaw (CVE-2024-58258) in versions before 13.0.4 and 14.x before 14.0.1. The vulnerability arises from improper sanitization of user-supplied GET parameters in the /css/preview API, which is parsed as LESS and can be abused via @import to trigger SSRF and local file d...