390 matches found
CVE-2025-59051: Improper Neutralization of Special Elements used in an OS Command
The FreePBX Endpoint Manager module includes a Network Scanning feature that provides web-based access to nmap functionality for network device discovery. In Endpoint Manager 16 before 16.0.92 and 17 before 17.0.6, insufficiently sanitized user-supplied input allows authenticated OS command...
Experts Warn of Widespread SonicWall VPN Compromise Impacting Over 100 Accounts
Cybersecurity company Huntress on Friday warned of "widespread compromise" of SonicWall SSL VPN devices to access multiple customer environments. "Threat actors are authenticating into multiple accounts rapidly across compromised devices," it said. "The speed and scale of these attacks imply that...
EUVD-2016-8812
Malware in sbrugna...
EUVD-2018-3487
Malware in sbrugna...
EUVD-2020-1181
Malware in sbrugna...
EUVD-2008-6842
Malware in sbrugna...
EUVD-2021-1159
Malware in sbrugna...
EUVD-2019-19124
Malware in sbrugna...
EUVD-2019-16075
Malware in sbrugna...
Remote-Local-Exploitation-Lab-
🔐 Remote & Local Exploitation Lab 📌 Objective Exploit a vu...
CVE-2025-10695 OpenSupports 4.11.0 — SSRF via test imap and smtp endpoints
Two unauthenticated diagnostic endpoints allow arbitrary backend-initiated network connections to an attacker‑supplied destination. Both endpoints are exposed with permission = 'any', enabling unauthenticated SSRF for internal network scanning and service interaction. This issue affects...
EUVD-2025-15721
Malicious code in bioql PyPI...
EUVD-2025-28984
Malicious code in bioql PyPI...
EUVD-2024-19298
Malicious code in bioql PyPI...
EUVD-2024-54700
Malicious code in bioql PyPI...
EUVD-2024-3338
Malicious code in bioql PyPI...
EUVD-2025-6049
Malicious code in bioql PyPI...
EUVD-2025-7115
Malicious code in bioql PyPI...
PentestMCP: A Toolkit for Agentic Penetration Testing
Agentic AI is transforming security by automating many tasks being performed manually. While initial agentic approaches employed a monolithic architecture, the Model-Context-Protocol has now enabled a remote-procedure call RPC paradigm to agentic applications, allowing for the flexible constructi...
CVE-2025-10695: Server-Side Request Forgery (SSRF)
Two unauthenticated diagnostic endpoints allow arbitrary backend-initiated network connections to an attacker‑supplied destination. Both endpoints are exposed with permission = 'any', enabling unauthenticated SSRF for internal network scanning and service interaction. This issue affects...