EUVD-2025-24630

Malicious code in bioql PyPI...

EUVD-2025-11770

Malicious code in bioql PyPI...

EUVD-2024-21487

Malicious code in bioql PyPI...

EUVD-2025-9184

Malicious code in bioql PyPI...

EUVD-2025-4351

Malicious code in bioql PyPI...

EUVD-2022-39764

Malicious code in bioql PyPI...

EUVD-2025-30526

Malicious code in bioql PyPI...

EUVD-2023-27111

Malicious code in bioql PyPI...

EUVD-2025-17550

Malicious code in bioql PyPI...

EUVD-2024-21485

Malicious code in bioql PyPI...

EUVD-2024-22292

Malicious code in bioql PyPI...

EUVD-2022-39766

Malicious code in bioql PyPI...

EUVD-2025-26928

Malicious code in bioql PyPI...

EUVD-2025-7023

Malicious code in bioql PyPI...

CVE-2025-61590 Cursor is vulnerable to RCE via .code-workspace files using Prompt Injection

Cursor is a code editor built for programming with AI. Versions 1.6 and below are vulnerable to Remote Code Execution RCE attacks through Visual Studio Code Workspaces. Workspaces allow users to open more than a single folder and save specific settings pretty similar to .vscode/settings.json for...

CVE-2025-61590

Cursor (editor) versions ≤1.6 are vulnerable to remote code execution via Visual Studio Code Workspaces. The attack involves hijacking the user’s chat context to prompt-inject and modify .code-workspace/settings, enabling RCE by writing to the workspace settings. The issue is fixed in version 1.7...

CVE-2025-61590 Cursor is vulnerable to RCE via .code-workspace files using Prompt Injection

Cursor is a code editor built for programming with AI. Versions 1.6 and below are vulnerable to Remote Code Execution RCE attacks through Visual Studio Code Workspaces. Workspaces allow users to open more than a single folder and save specific settings pretty similar to .vscode/settings.json for...

CVE-2025-61589 Cursor: Potential Information Leakage via Mermaid Diagram

Cursor is a code editor built for programming with AI. In versions 1.6 and below, Mermaid a to render diagrams allows embedding images which then get rendered by Cursor in the chat box. An attacker can use this to exfiltrate sensitive information to a third-party attacker controlled server throug...

PT-2025-40535

Name of the Vulnerable Software and Affected Versions Cursor versions 1.6 and below Description Cursor, a code editor for programming with AI, is susceptible to Remote Code Execution RCE attacks through Visual Studio Code Workspaces. Workspaces allow users to save specific settings for folders or...

CVE-2025-59592

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fernando Acosta Make Column Clickable Elementor make-column-clickable-elementor allows Stored XSS.This issue affects Make Column Clickable Elementor: from n/a through = 1.6.0...