CVE-2025-64107 Cursor is Vulnerable to Path Manipulation Using Backslashes on Windows

Cursor is a code editor built for programming with AI. In versions 1.7.52 and below, manipulating internal settings may lead to RCE. Cursor detects path manipulation via forward slashes ./.cursor/./././././mcp.json etc., and requires human approval to complete the operation. However, the same kin...

PT-2025-45037

Name of the Vulnerable Software and Affected Versions NVIDIA NVApp for Windows affected versions not specified Description NVIDIA NVApp for Windows has a flaw in its installer that allows a local attacker to manipulate search path elements. Exploitation could result in code execution and privileg...

PT-2025-45061

Name of the Vulnerable Software and Affected Versions Cursor versions 1.7.52 and below Description Cursor, a code editor built for programming with AI, is susceptible to remote code execution RCE due to improper handling of path manipulation. The editor correctly detects and requires approval for...

CVE-2025-12347 MaxSite CMS save-file-ajax.php unrestricted upload

A flaw has been found in MaxSite CMS up to 109. This issue affects some unknown processing of the file application/maxsite/admin/plugins/editorfiles/save-file-ajax.php. Executing manipulation of the argument filepath/content can lead to unrestricted upload. The attack can be executed remotely. Th...

CVE-2025-12347

CVE-2025-12347 affects MaxSite CMS up to version 109. The vulnerability resides in the interactive handling of file_path/content in the file application/maxsite/admin/plugins/editor_files/save-file-ajax.php, where manipulation can lead to unrestricted file uploads. Exploitation can be performed r...

PT-2025-44083

Name of the Vulnerable Software and Affected Versions MaxSite CMS versions prior to 110 Description A flaw exists in MaxSite CMS that allows for unrestricted file uploads. This issue is related to the processing of the file path and content arguments within the file...

PT-2025-44084

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw exists in Keycloak where the /admin path can be accessed via a proxy, such as ha-proxy, by using relative or non-normalized paths. Keycloak documentation advises against exposing the...

CVE-2025-5605 Authentication Bypass via URI Manipulation in Multiple WSO2 Products' Management Console Leading to Partial Information Disclosure

An authentication bypass vulnerability exists in the Management Console of multiple WSO2 products. A malicious actor with access to the console can manipulate the request URI to bypass authentication and access certain restricted resources, resulting in partial information disclosure. The known...

BIT-EJBCA-2025-3027 Open Redirect vulnerability in EJBCA

The vulnerability exists in the EJBCA service, version 8.0 Enterprise. By making a small change to the PATH of the URL associated with the service, the server fails to find the requested file and redirects to an external page. This vulnerability could allow users to be redirected to potentially...

EUVD-2001-0926

Malware in sbrugna...

EUVD-2019-4672

Malware in sbrugna...

EUVD-2005-4419

Malware in sbrugna...

EUVD-2021-2555

Malware in sbrugna...

EUVD-2015-4618

Malware in sbrugna...

EUVD-2017-1569

Malware in sbrugna...

EUVD-2006-5163

Malware in sbrugna...

EUVD-2004-0963

Malware in sbrugna...

EUVD-2007-5394

Malware in sbrugna...

EUVD-2020-29040

Malware in sbrugna...

EUVD-2020-17852

Malware in sbrugna...