Lucene search
+L

7781 matches found

Cvelist
Cvelist
•added 2025/10/10 7:50 p.m.•32 views

CVE-2025-61929 Cherry Studio allows one-click on a specific URL to cause a command to execute

Cherry Studio is a desktop client that supports for multiple LLM providers. Cherry Studio registers a custom protocol called cherrystudio://. When handling the MCP installation URL, it parses the base64-encoded configuration data and directly executes the command within it. In the files...

9.6CVSS0.00471EPSS
SaveExploits1References1
CVE
CVE
•added 2025/10/10 7:50 p.m.•65 views

CVE-2025-61929

Cherry Studio is affected by a code-injection vulnerability where the cherrystudio://mcp protocol handler parses base64-encoded configuration data and directly executes the contained command. Affected component paths include src/main/services/ProtocolClient.ts and src/main/services/urlschema/mcp-...

9.6CVSS5.9AI score0.00471EPSS
SaveExploits1References1Affected Software1
osv_cve
osv_cve
•added 2025/10/10 7:50 p.m.•21 views

CVE-2025-61929 Cherry Studio allows one-click on a specific URL to cause a command to execute

Cherry Studio is a desktop client that supports for multiple LLM providers. Cherry Studio registers a custom protocol called cherrystudio://. When handling the MCP installation URL, it parses the base64-encoded configuration data and directly executes the command within it. In the files...

9.6CVSS7AI score
SaveExploits0References3
EUVD
EUVD
•added 2025/10/10 7:50 p.m.•21 views

EUVD-2025-33778

Cherry Studio is a desktop client that supports for multiple LLM providers. Cherry Studio registers a custom protocol called cherrystudio://. When handling the MCP installation URL, it parses the base64-encoded configuration data and directly executes the command within it. In the files...

9.6CVSS5.8AI score0.00471EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/10/10 12:00 a.m.•18 views

PT-2025-41600

Name of the Vulnerable Software and Affected Versions Cherry Studio versions 1.7.0-alpha.4 and earlier Description Cherry Studio is a desktop client supporting multiple LLM providers. It registers a custom protocol, cherrystudio://, and when handling MCP installation URLs, it parses base64-encode...

9.6CVSS6AI score0.00471EPSS
SaveExploits1References12
RedhatCVE
RedhatCVE
•added 2025/10/08 6:18 p.m.•47 views

CVE-2025-11346

A vulnerability has been found in ILIAS up to 8.23/9.13/10.1. This affects the function unserialize of the component Base64 Decoding Handler. Such manipulation of the argument fsettings leads to deserialization. It is possible to launch the attack remotely. Upgrading to version 8.24, 9.14 and 10....

9.8CVSS6.1AI score0.00443EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2012-1986

Malware in sbrugna...

7.1CVSS6.3AI score0.00789EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2005-0457

Malware in sbrugna...

5CVSS6.1AI score0.03403EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2020-7347

Malware in sbrugna...

9.8CVSS8.1AI score0.01475EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2020-30158

Malware in sbrugna...

6.5CVSS6.7AI score0.00541EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2016-6887

Malware in sbrugna...

4.3CVSS5.6AI score0.00842EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2004-2610

Malware in sbrugna...

7.5CVSS6.4AI score0.01544EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2012-3336

Malware in sbrugna...

3.7CVSS6.1AI score0.00337EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•26 views

EUVD-2021-11769

Malware in sbrugna...

9.8CVSS8.1AI score0.01902EPSS
SaveExploits2References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2019-6725

Malware in sbrugna...

9.8CVSS8.2AI score0.01194EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2018-7587

Malware in sbrugna...

5.3CVSS6AI score0.00525EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2016-7467

Malware in sbrugna...

7.8CVSS7.4AI score0.00409EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2009-2910

Malware in sbrugna...

7.8CVSS6.4AI score0.02593EPSS
SaveExploits2References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•28 views

EUVD-2015-8475

Malware in sbrugna...

7.4CVSS7.3AI score0.0192EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2019-3579

Malware in sbrugna...

9.8CVSS8.2AI score0.02077EPSS
SaveExploits0References3
Rows per page
Query Builder