582 matches found
CVE-2025-64107
CVE-2025-64107 affects Cursor (open-source AI code editor). Versions 1.7.52 and earlier are vulnerable to path manipulation allowing RCE on Windows due to incomplete detection of backslash-based path operations, unlike the forward-slash checks that require approval. An attacker with prior control...
PT-2025-45061
Name of the Vulnerable Software and Affected Versions Cursor versions 1.7.52 and below Description Cursor, a code editor built for programming with AI, is susceptible to remote code execution RCE due to improper handling of path manipulation. The editor correctly detects and requires approval for...
PT-2025-45037
Name of the Vulnerable Software and Affected Versions NVIDIA NVApp for Windows affected versions not specified Description NVIDIA NVApp for Windows has a flaw in its installer that allows a local attacker to manipulate search path elements. Exploitation could result in code execution and privileg...
CVE-2025-12347 MaxSite CMS save-file-ajax.php unrestricted upload
A flaw has been found in MaxSite CMS up to 109. This issue affects some unknown processing of the file application/maxsite/admin/plugins/editorfiles/save-file-ajax.php. Executing manipulation of the argument filepath/content can lead to unrestricted upload. The attack can be executed remotely. Th...
CVE-2025-12347
CVE-2025-12347 affects MaxSite CMS up to version 109. The vulnerability resides in the interactive handling of file_path/content in the file application/maxsite/admin/plugins/editor_files/save-file-ajax.php, where manipulation can lead to unrestricted file uploads. Exploitation can be performed r...
PT-2025-44083
Name of the Vulnerable Software and Affected Versions MaxSite CMS versions prior to 110 Description A flaw exists in MaxSite CMS that allows for unrestricted file uploads. This issue is related to the processing of the file path and content arguments within the file...
PT-2025-44084
Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw exists in Keycloak where the /admin path can be accessed via a proxy, such as ha-proxy, by using relative or non-normalized paths. Keycloak documentation advises against exposing the...
CVE-2025-5605 Authentication Bypass via URI Manipulation in Multiple WSO2 Products' Management Console Leading to Partial Information Disclosure
An authentication bypass vulnerability exists in the Management Console of multiple WSO2 products. A malicious actor with access to the console can manipulate the request URI to bypass authentication and access certain restricted resources, resulting in partial information disclosure. The known...
BIT-EJBCA-2025-3027 Open Redirect vulnerability in EJBCA
The vulnerability exists in the EJBCA service, version 8.0 Enterprise. By making a small change to the PATH of the URL associated with the service, the server fails to find the requested file and redirects to an external page. This vulnerability could allow users to be redirected to potentially...
EUVD-2010-2485
Malware in sbrugna...
EUVD-2005-4419
Malware in sbrugna...
EUVD-2006-5163
Malware in sbrugna...
EUVD-2021-2555
Malware in sbrugna...
EUVD-2020-17852
Malware in sbrugna...
EUVD-2001-0926
Malware in sbrugna...
EUVD-2018-10694
Malware in sbrugna...
EUVD-2004-0963
Malware in sbrugna...
EUVD-2007-5394
Malware in sbrugna...