EUVD-2025-32196

Malicious code in bioql PyPI...

EUVD-2025-16490

Malicious code in bioql PyPI...

EUVD-2024-34323

Malicious code in bioql PyPI...

EUVD-2025-1984

Malicious code in bioql PyPI...

EUVD-2022-4862

Malicious code in bioql PyPI...

EUVD-2025-26391

Malicious code in bioql PyPI...

EUVD-2024-39635

Malicious code in bioql PyPI...

EUVD-2023-0586

Malicious code in bioql PyPI...

EUVD-2022-7166

Malicious code in bioql PyPI...

EUVD-2025-13435

Malicious code in bioql PyPI...

EUVD-2022-34822

Malicious code in bioql PyPI...

EUVD-2025-2763

Malicious code in bioql PyPI...

EUVD-2023-29021

Malicious code in bioql PyPI...

EUVD-2024-27140

Malicious code in bioql PyPI...

CVE-2025-61591 Cursor CLI's Cursor Agent MCP OAuth2 Communication is Vulnerable to Remote Code Execution

Cursor is a code editor built for programming with AI. In versions 1.7 and below, when MCP uses OAuth authentication with an untrusted MCP server, an attacker can impersonate a malicious MCP server and return crafted, maliciously injected commands during the interaction process, leading to comman...

EUVD-2025-32313

Cursor is a code editor built for programming with AI. In versions 1.7 and below, when MCP uses OAuth authentication with an untrusted MCP server, an attacker can impersonate a malicious MCP server and return crafted, maliciously injected commands during the interaction process, leading to comman...

CVE-2025-61591 Cursor CLI's Cursor Agent MCP OAuth2 Communication is Vulnerable to Remote Code Execution

Cursor is a code editor built for programming with AI. In versions 1.7 and below, when MCP uses OAuth authentication with an untrusted MCP server, an attacker can impersonate a malicious MCP server and return crafted, maliciously injected commands during the interaction process, leading to comman...

Cursor 操作系统命令注入漏洞

Cursor is an AI code editor from Cursor open source. An operating system command injection vulnerability exists in Cursor 1.7 and earlier versions, which stems from the possibility that specially crafted commands may be returned during the OAuth authentication process, potentially leading to...

PT-2025-40602

Name of the Vulnerable Software and Affected Versions Karapace versions 5.0.0 through 5.0.1 Description Karapace, an open-source implementation of Kafka REST and Schema Registry, has an issue where authentication checks are bypassed when OAuth 2.0 Bearer Token authentication is enabled...

CVE-2025-59405

The Flock Safety Peripheral com.flocksafety.android.peripheral application 7.38.3 for Android installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices contains a cleartext DataDog API key within in its codebase. Because application binaries can be trivially decompil...