EUVD-2024-1367

Malicious code in bioql PyPI...

EUVD-2024-40454

Malicious code in bioql PyPI...

EUVD-2023-1718

Malicious code in bioql PyPI...

EUVD-2022-33241

Malicious code in bioql PyPI...

EUVD-2022-2934

Malicious code in bioql PyPI...

EUVD-2025-11837

Malicious code in bioql PyPI...

EUVD-2021-30711

Malicious code in bioql PyPI...

EUVD-2024-19964

Malicious code in bioql PyPI...

EUVD-2025-13597

Malicious code in bioql PyPI...

EUVD-2025-11859

Malicious code in bioql PyPI...

EUVD-2025-12649

Malicious code in bioql PyPI...

EUVD-2021-6838

Malicious code in bioql PyPI...

EUVD-2023-12591

Malicious code in bioql PyPI...

Flowise has unsandboxed remote code execution via Custom MCP

Summary The Custom MCPs feature is designed to execute OS commands, for instance, using tools like npx to spin up local MCP Servers. However, Flowise's inherent authentication and authorization model is minimal and lacks role-based access controls RBAC. Furthermore, the default installation of...

Web-Vulnerability-Scanner

This is a PoC exploit for a web vulnerability scanner created us...

Linux Distros Unpatched Vulnerability : CVE-2022-36062

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Grafana is an open-source platform for monitoring and observability. In versions prior to 8.5.13, 9.0.9, and 9.1.6, Grafana is subject to Improper Preservation ...

Linux Distros Unpatched Vulnerability : CVE-2018-16886

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - etcd versions 3.2.x before 3.2.26 and 3.3.x before 3.3.11 are vulnerable to an improper authentication issue when role-based access control RBAC is used and...

VulnCheck KEV: CVE-2025-57788

A vulnerability in a known login mechanism allows unauthenticated attackers to execute API calls without requiring user credentials. RBAC helps limit the exposure but does not eliminate risk...

CVE-2025-57788

A vulnerability in a known login mechanism allows unauthenticated attackers to execute API calls without requiring user credentials. RBAC helps limit the exposure but does not eliminate risk...

CVE-2025-57788

CVE-2025-57788 affects Commvault components (notably CommandCenter login flow) where an unauthenticated attacker can trigger API calls without user credentials. The connected records describe a pre-auth vulnerability chain leveraged alongside CVE-2025-57790/57791 to enable broader remote code exe...