CVE-2019-19823

creationtimestamp| type| source ---|---|--- 2025-11-20 11:50:03+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2019/CVE-2019-19823.yaml 2025-11-21 21:02:49+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m666lbfleu2w...

CVE-2017-17092

creationtimestamp| type| source ---|---|--- 2025-11-20 02:12:04+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2017/CVE-2017-17092.yaml 2025-11-21 21:02:45+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m666lb5cds25...

GO-2025-4095 Kgateway transformation policy template can emit files from the container in github.com/kgateway-dev/kgateway

Kgateway transformation policy template can emit files from the container in github.com/kgateway-dev/kgateway...

CVE-2025-64109

Cursor is a code editor built for programming with AI. In versions and below, a vulnerability in the Cursor CLI Beta allowed an attacker to achieve remote code execution through the MCP Model Context Protocol server mechanism by uploading a malicious MCP configuration in .cursor/mcp.json file in ...

GO-2025-4002 Canonical LXD Project Existence Determination Through Error Handling in Image Export Function in github.com/canonical/lxd

Canonical LXD Project Existence Determination Through Error Handling in Image Export Function in github.com/canonical/lxd...

CVE-2025-64109

Cursor is a code editor built for programming with AI. In versions and below, a vulnerability in the Cursor CLI Beta allowed an attacker to achieve remote code execution through the MCP Model Context Protocol server mechanism by uploading a malicious MCP configuration in .cursor/mcp.json file in ...

CVE-2025-64109 Cursor CLI Beta: Command Injection via Untrusted MCP Configuration

Cursor is a code editor built for programming with AI. In versions and below, a vulnerability in the Cursor CLI Beta allowed an attacker to achieve remote code execution through the MCP Model Context Protocol server mechanism by uploading a malicious MCP configuration in .cursor/mcp.json file in ...

PT-2025-45063

Name of the Vulnerable Software and Affected Versions Cursor versions prior to 2025.09.17-25b418f Description Cursor is a code editor designed for programming with AI. A flaw in the Cursor CLI Beta could allow a remote attacker to execute code. This is possible through the Model Context Protocol...

GO-2025-4038 Git LFS may write to arbitrary files via crafted symlinks in github.com/git-lfs/git-lfs

Git LFS may write to arbitrary files via crafted symlinks in github.com/git-lfs/git-lfs...

Dynamic binary instrumentation (DBI) with DynamoRio

This blog introduces dynamic binary instrumentation DBI and guides you through building your own DBI tool with the open-source DynamoRIO framework on Windows 11. DBI enables powerful runtime analysis and modification of binaries critical for malware analysis, security auditing, reverse engineerin...

MAL-2025-49377 Malicious code in github.com/boltdb-go/bolt (Git)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 1cad7a46a80076eedc2c3c00be0d3215bdfed842f6cc04c238d3b2591b38e2ad This malicious git repository is a typosquat of the legitimate BoltDB Go package. It contains a backdoor that enables remote code executio...

Spring Session Hazelcast: Now Led by Hazelcast Team

It gives me great pleasure to announce that the Spring Session Hazelcast project will now be led by the Hazelcast Team. NOTE: This announcement is in alignment with our announcement Spring Session MongoDB: Now Led by MongoDB Team. For ten years Spring Session has provided the infrastructure for...

CVE-2021-38154

creationtimestamp| type| source ---|---|--- 2025-10-10 10:51:44+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-38154.yaml 2025-10-12 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m2zlw2iwgd2n 2026-05-21...

EUVD-2021-27172

Malware in sbrugna...

EUVD-2021-27101

Malware in sbrugna...

EUVD-2021-27067

Malware in sbrugna...

EUVD-2023-2639

Malicious code in bioql PyPI...

EUVD-2022-35056

Malicious code in bioql PyPI...

EUVD-2022-1664

Malicious code in bioql PyPI...

EUVD-2023-1240

Malicious code in bioql PyPI...