EUVD-2023-41316

Malicious code in bioql PyPI...

EUVD-2024-54212

Malicious code in bioql PyPI...

EUVD-2023-41461

Malicious code in bioql PyPI...

EUVD-2022-26094

Malicious code in bioql PyPI...

EUVD-2024-29863

Malicious code in bioql PyPI...

EUVD-2023-31262

Malicious code in bioql PyPI...

EUVD-2024-29862

Malicious code in bioql PyPI...

EUVD-2024-53869

Malicious code in bioql PyPI...

EUVD-2025-1485

Malicious code in bioql PyPI...

EUVD-2023-57943

Malicious code in bioql PyPI...

EUVD-2022-30424

Malicious code in bioql PyPI...

EUVD-2021-8722

Malicious code in bioql PyPI...

EUVD-2022-27479

Malicious code in bioql PyPI...

EUVD-2023-53533

Malicious code in bioql PyPI...

sparta

This is a network infrastructure penetration testing tool called SPARTA. It is a Python GUI application that simplifies the scanning and enumeration phase of penetration testing by providing point-and-click access to various tools and displaying all tool output in a convenient way. The tool...

Do Not Use X11 Forwarding

The X11 forwarding function of SSH allows the GUI program of the remote host to be executed on the local host. If the X11 forwarding function is enabled, the attack surface is expanded and other users on the X11 server may attack the local host. If the function is not required in the service...

UBUNTU-CVE-2025-59692

PureVPN client applications on Linux through September 2025 mishandle firewalling. They flush the system's existing iptables rules and apply default ACCEPT policies when connecting to a VPN server. This removes firewall rules that may have been configured manually or by other software e.g., UFW,...

pagodo

This is an offensive tool for web application discovery. The primary CVE ID is not present in the provided context. The target product/service or framework is Google Search, and the vulnerability class/vector is not explicitly stated. The probable entry points are scripts/modules such as...

Realistic Environmental Injection Attacks on GUI Agents

GUI agents built on LVLMs are increasingly used to interact with websites. However, their exposure to open-world content makes them vulnerable to Environmental Injection Attacks EIAs that hijack agent behavior via webpage elements. Many recent studies assume the attacker to be a regular user who...

CVE-2025-55671

Uncontrolled search path element issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, arbitrary code may be executed with the privilege of running the program...