EUVD-2025-19660

Malicious code in bioql PyPI...

EUVD-2025-19657

Malicious code in bioql PyPI...

EUVD-2025-20870

Malicious code in bioql PyPI...

EUVD-2025-27271

Malicious code in bioql PyPI...

EUVD-2025-21894

Malicious code in bioql PyPI...

EUVD-2025-29193

Malicious code in bioql PyPI...

EUVD-2025-12788

Malicious code in bioql PyPI...

EUVD-2025-31942

Malicious code in bioql PyPI...

EUVD-2025-20094

Malicious code in bioql PyPI...

EUVD-2025-19433

Malicious code in bioql PyPI...

EUVD-2025-29621

Malicious code in bioql PyPI...

EUVD-2022-55397

Malicious code in bioql PyPI...

EUVD-2025-25438

Malicious code in bioql PyPI...

EUVD-2025-23405

Malicious code in bioql PyPI...

EUVD-2025-20689

Malicious code in bioql PyPI...

EUVD-2025-32313

Cursor is a code editor built for programming with AI. In versions 1.7 and below, when MCP uses OAuth authentication with an untrusted MCP server, an attacker can impersonate a malicious MCP server and return crafted, maliciously injected commands during the interaction process, leading to comman...

CVE-2025-61591: Improper Neutralization of Special Elements used in an OS Command

Cursor is a code editor built for programming with AI. In versions 1.7 and below, when MCP uses OAuth authentication with an untrusted MCP server, an attacker can impersonate a malicious MCP server and return crafted, maliciously injected commands during the interaction process, leading to comman...

Malware in @lanyer640/mcp-runcommand-server

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Directory Traversal

Overview redmine-mcp-server is a Production-ready MCP server for Redmine with security, pagination, and enterprise features Affected versions of this package are vulnerable to Directory Traversal via the MCP endpoint. An attacker can gain an access to restricted files by passing a specially craft...

SUSE CVE-2023-53459

In the Linux kernel, the following vulnerability has been resolved: HID: mcp-2221: prevent UAF in delayed work If the device is plugged/unplugged without giving time for mcpinitwork to complete, we might kick in the devm free code path and thus have unavailable struct mcp2221 while in delayed wor...