EUVD-2025-12649

Malicious code in bioql PyPI...

EUVD-2023-24315

Malicious code in bioql PyPI...

EUVD-2025-0214

Malicious code in bioql PyPI...

EUVD-2022-32619

Malicious code in bioql PyPI...

EUVD-2022-42903

Malicious code in bioql PyPI...

EUVD-2025-12558

Malicious code in bioql PyPI...

EUVD-2024-54877

Malicious code in bioql PyPI...

EUVD-2023-12591

Malicious code in bioql PyPI...

EUVD-2024-1367

Malicious code in bioql PyPI...

EUVD-2025-13597

Malicious code in bioql PyPI...

EUVD-2022-1756

Malicious code in bioql PyPI...

EUVD-2022-1908

Malicious code in bioql PyPI...

Flowise has unsandboxed remote code execution via Custom MCP

Summary The Custom MCPs feature is designed to execute OS commands, for instance, using tools like npx to spin up local MCP Servers. However, Flowise's inherent authentication and authorization model is minimal and lacks role-based access controls RBAC. Furthermore, the default installation of...

Web-Vulnerability-Scanner

This is a PoC exploit for a web vulnerability scanner created us...

Linux Distros Unpatched Vulnerability : CVE-2022-36062

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Grafana is an open-source platform for monitoring and observability. In versions prior to 8.5.13, 9.0.9, and 9.1.6, Grafana is subject to Improper Preservation ...

Linux Distros Unpatched Vulnerability : CVE-2018-16886

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - etcd versions 3.2.x before 3.2.26 and 3.3.x before 3.3.11 are vulnerable to an improper authentication issue when role-based access control RBAC is used and...

VulnCheck KEV: CVE-2025-57788

A vulnerability in a known login mechanism allows unauthenticated attackers to execute API calls without requiring user credentials. RBAC helps limit the exposure but does not eliminate risk...

CVE-2025-57788

A vulnerability in a known login mechanism allows unauthenticated attackers to execute API calls without requiring user credentials. RBAC helps limit the exposure but does not eliminate risk...

PT-2025-33898

Name of the Vulnerable Software and Affected Versions: Commvault versions prior to 11.36.60 Description: A vulnerability in a known login mechanism allows unauthenticated attackers to execute API calls without requiring user credentials. Role-Based Access Control RBAC can limit exposure, but does...

CVE-2025-57788 Unauthorized API Access Risk

A vulnerability in a known login mechanism allows unauthenticated attackers to execute API calls without requiring user credentials. RBAC helps limit the exposure but does not eliminate risk...