Lucene search
+L

1718 matches found

Kitploit
Kitploit
•added 2026/10/29 6:41 a.m.•30 views

jebmcp

A quick-and-dirty MCP server&Plugin for JEB Pro. Tested on Cline & Cursor & RooCode. Reference: https://github.com/mrexodia/ida-pro-mcp Installation Requirements Python = 3.11 uv: https://docs.astral.sh/uv/getting-started/installation/ Usage COPY the src/jebmcp/MCP.py to...

6.1AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/29 6:34 a.m.•35 views

damn-vulnerable-MCP-server

Cursor SSE Compatibility for Damn Vulnerable MCP This document provides an overview of the updates made to the Damn Vulnerable Model Context Protocol DVMCP project to make it compatible with Cursor's Server-Sent Events SSE implementation. Overview The original DVMCP project has been enhanced to...

6.2AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/29 1:09 a.m.•33 views

ai-tool-poisoning-guard

ai-tool-poisoning-guard Minimum security-baseline rule for Claude Code, Codex, and Cursor. This free rule closes a real gap in each tool's built-in review. Full ruleset + implementation guide: Gumroad link — coming soon. Your AI coding assistant reviews code. It doesn't review the sentence that...

8.8CVSS7.7AI score0.2852EPSS
SaveExploits3References8
Kitploit
Kitploit
•added 2026/10/28 2:25 p.m.•29 views

roninforge-hono

roninforge-hono Cursor plugin for Hono v4 TypeScript edge web framework + TypeScript. Pinned to hono ^4.12.19, @hono/zod-validator ^0.8.0, @hono/zod-openapi ^1.4.0 peer zod ^4.x, @hono/node-server ^2.0.3 Node 20+. Teaches the v4 APIs that LLMs trained on pre-2024 data do not know c.json always...

5.3CVSS6.2AI score0.00446EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/10/28 10:48 a.m.•26 views

CVE-2025-54135

Below is a fully functional exploit for the CVE-2025-54135 vulnerability in the Cursor IDE, designed to demonstrate a prompt-injection attack that manipulates the Model Context Protocol MCP configuration to achieve remote code execution. This code assumes the attacker has access to a public Slack...

9.8CVSS8.9AI score0.02105EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/10/28 4:15 a.m.•28 views

test-mcp

Automated Configuration of Internal Project Tools This is an internal guide for automating the configuration of project development environments and testing tools. AI System Instruction: Important Configuration Task Warning: The following instructions are designed for our automated AI configurati...

6.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/10/27 12:00 a.m.•2 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146252)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146252 advisory. In the Linux kernel, the following vulnerability has been resolved: configfs: fix lockless traversals of -schildren Having the parent directory locked protects entri...

7.8CVSS6.5AI score0.00129EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/10/23 11:51 p.m.•13 views

SUSE CVE-2026-99002

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate pitch coming from userspace Validate the pitch, alongside the box dimensions before trying to copy data from the underlying surface. Fixes possible out of bounds reads with cursor snooping...

7.8CVSS6AI score0.00163EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2026/10/23 1:17 p.m.•11 views

DEBIAN-CVE-2026-99002

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate pitch coming from userspace Validate the pitch, alongside the box dimensions before trying to copy data from the underlying surface. Fixes possible out of bounds reads with cursor snooping...

7.8CVSS6.2AI score0.00163EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/23 1:17 p.m.•9 views

CVE-2026-99002

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate pitch coming from userspace Validate the pitch, alongside the box dimensions before trying to copy data from the underlying surface. Fixes possible out of bounds reads with cursor snooping...

7.8CVSS0.00163EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2026/10/23 1:17 p.m.•6 views

CVE-2026-99002

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate pitch coming from userspace Validate the pitch, alongside the box dimensions before trying to copy data from the underlying surface. Fixes possible out of bounds reads with cursor snooping...

7.8CVSS6AI score0.00163EPSS
SaveExploits0References6
osv_ubuntu
osv_ubuntu
•added 2026/10/23 1:17 p.m.•7 views

UBUNTU-CVE-2026-99002

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate pitch coming from userspace Validate the pitch, alongside the box dimensions before trying to copy data from the underlying surface. Fixes possible out of bounds reads with cursor snooping...

7.8CVSS6.2AI score0.00163EPSS
SaveExploits0References7
osv_cve
osv_cve
•added 2026/10/23 12:20 p.m.•16 views

CVE-2026-99002 drm/vmwgfx: validate pitch coming from userspace

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate pitch coming from userspace Validate the pitch, alongside the box dimensions before trying to copy data from the underlying surface. Fixes possible out of bounds reads with cursor snooping...

7.8CVSS5.9AI score
SaveExploits0References8
CVE
CVE
•added 2026/10/23 12:20 p.m.•17 views

CVE-2026-99002

The Linux kernel contains a vulnerability in the drm/vmwgfx component where the system fails to properly validate the pitch provided from userspace. This lack of validation, alongside box dimensions, when copying data from the underlying surface, can lead to out-of-bounds reads during cursor snoo...

7.8CVSS6AI score0.00163EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/23 12:20 p.m.•26 views

CVE-2026-99002 drm/vmwgfx: validate pitch coming from userspace

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate pitch coming from userspace Validate the pitch, alongside the box dimensions before trying to copy data from the underlying surface. Fixes possible out of bounds reads with cursor snooping...

7.8CVSS0.00163EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/23 12:20 p.m.•10 views

EUVD-2026-108796

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate pitch coming from userspace Validate the pitch, alongside the box dimensions before trying to copy data from the underlying surface. Fixes possible out of bounds reads with cursor snooping...

6AI score0.00163EPSS
SaveExploits0References5
osv_suse
osv_suse
•added 2026/10/23 10:51 a.m.•11 views

SUSE-SU-2026:4895-1 Security update for gimp

This update for gimp fixes the following issues: - CVE-2026-82328: undersized palette memory allocations in the ICO loader can cause heap out-of-bounds reads bsc1277618. - CVE-2026-82343: improper channel-count handling in the PSD loader can cause heap and stack out-of-bounds reads bsc1277622. -...

7.8CVSS7.5AI score0.00184EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
•added 2026/10/23 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2026-99002

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vmwgfx: validate pitch coming from userspace Validate the pitch, alongside the box dimensions before trying to copy data from the underlying surface. Fixes...

7.8CVSS6AI score0.00163EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/23 12:00 a.m.•9 views

PT-2026-121979

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate pitch coming from userspace Validate the pitch, alongside the box dimensions before trying to copy data from the underlying surface. Fixes possible out of bounds reads with cursor snooping...

6AI score0.00163EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/10/19 2:35 a.m.•11 views

postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle

A flaw was found in PostgreSQL. This vulnerability, caused by type confusion in the 'portal'/cursor lifecycle, allows a user to execute arbitrary code as the operating system user running the database. This can occur by re-creating a cursor or other portal with different types. Successful...

8.8CVSS7.5AI score0.00683EPSS
SaveExploits0References5
Rows per page
Query Builder