https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 22:11:21 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-19142 EUVD-2026-19142 https://cve.radiocsirt.org/vuln/euvd-2026-19142 https://cve.radiocsirt.org/vuln/fkie_cve-2022-38844 <p>CSV Injection in Create Contacts in EspoCRM 7.1.8 allows remote authenticated users to run system commands via creating contacts with payloads capable of executing system commands. Admin user exporting contacts in CSV file may end up executing the malicious system commands on his system.</p> <p>CSV Injection in Create Contacts in EspoCRM 7.1.8 allows remote authenticated users to run system commands via creating contacts with payloads capable of executing system commands. Admin user exporting contacts in CSV file may end up executing the malicious system commands on his system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-38844 https://cve.radiocsirt.org/vuln/ghsa-pvj2-28fw-3gc8 <p>CSV Injection in Create Contacts in EspoCRM 7.1.8 allows remote authenticated users to run system commands via creating contacts with payloads capable of executing system commands. Admin user exporting contacts in CSV file may end up executing the malicious system commands on his system.</p> <p>CSV Injection in Create Contacts in EspoCRM 7.1.8 allows remote authenticated users to run system commands via creating contacts with payloads capable of executing system commands. Admin user exporting contacts in CSV file may end up executing the malicious system commands on his system.</p> https://cve.radiocsirt.org/vuln/ghsa-pvj2-28fw-3gc8 https://cve.radiocsirt.org/vuln/gsd-2022-38844 gsd-2022-38844 https://cve.radiocsirt.org/vuln/gsd-2022-38844