EUVD-2025-27039

Malicious code in bioql PyPI...

EUVD-2024-36693

Malicious code in bioql PyPI...

EUVD-2023-58312

Malicious code in bioql PyPI...

EUVD-2023-46953

Malicious code in bioql PyPI...

EUVD-2024-3120

Malicious code in bioql PyPI...

EUVD-2025-18658

Malicious code in bioql PyPI...

EUVD-2024-19298

Malicious code in bioql PyPI...

EUVD-2023-58314

Malicious code in bioql PyPI...

EUVD-2021-8577

Malicious code in bioql PyPI...

EUVD-2025-8487

Malicious code in bioql PyPI...

EUVD-2021-34049

Malicious code in bioql PyPI...

EUVD-2023-29123

Malicious code in bioql PyPI...

EUVD-2024-47315

Malicious code in bioql PyPI...

EUVD-2024-54700

Malicious code in bioql PyPI...

EUVD-2025-6049

Malicious code in bioql PyPI...

PT-2025-40598

Name of the Vulnerable Software and Affected Versions OpenSupports version 4.11.0 Description Two unauthenticated diagnostic endpoints permit arbitrary backend-initiated network connections to a destination specified by an attacker. These endpoints are accessible without authentication due to a...

CVE-2025-10695: Server-Side Request Forgery (SSRF)

Two unauthenticated diagnostic endpoints allow arbitrary backend-initiated network connections to an attacker‑supplied destination. Both endpoints are exposed with permission = 'any', enabling unauthenticated SSRF for internal network scanning and service interaction. This issue affects...

PentestMCP: A Toolkit for Agentic Penetration Testing

Agentic AI is transforming security by automating many tasks being performed manually. While initial agentic approaches employed a monolithic architecture, the Model-Context-Protocol has now enabled a remote-procedure call RPC paradigm to agentic applications, allowing for the flexible constructi...

sparta

This is a network infrastructure penetration testing tool called SPARTA. It is a Python GUI application that simplifies the scanning and enumeration phase of penetration testing by providing point-and-click access to various tools and displaying all tool output in a convenient way. The tool...

discover

This is a collection of custom bash scripts used to automate various penetration testing tasks, including reconnaissance, scanning, enumeration, and malicious payload creation using Metasploit. The scripts are designed to be used with Kali Linux. The scripts are organized into several categories,...