93 matches found
GAP-Burp-Extension
About - v6.3 This is an evolution of the original getAllParams extension for Burp. Not only does it find more potential parameters for you to investigate, but it also finds potential links to try these parameters on, and produces a target specific wordlist to use for fuzzing. The full Help...
CVE-2026-73217 Cursor: Sandbox escape via tampered Python virtual environments
Cursor is a code editor built for programming with AI. Prior to 3.1.2, Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode to replace a virtual environment's Python executable with a malicious wrapper that the Microsoft Python extension invokes outside the sandbox, allowing...
CVE-2026-54981
Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-54981
The CVE-2026-54981 entry concerns the Visual Studio Code Python extension, where inclusion of functionality from an untrusted control sphere leads to a local security feature bypass. Affected component: VS Code Python extension; root cause described as untrusted control sphere function inclusion....
CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability
...
CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability
...
EUVD-2026-56605
Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-54981
Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally...
Visual Studio Code Python Extension Security Feature Bypass Vulnerability
Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally...
PT-2026-70832
Cursor is a code editor built for programming with AI. Prior to 3.1.2, Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode to replace a virtual environment's Python executable with a malicious wrapper that the Microsoft Python extension invokes outside the sandbox, allowing...
PT-2026-70390
Name of the Vulnerable Software and Affected Versions Visual Studio Code - Python extension affected versions not specified Description An issue exists where the inclusion of functionality from an untrusted control sphere allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-54981: Inclusion of Functionality from Untrusted Control Sphere
Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally...
Fedora 45 : python-safetensors / rust-safetensors (2026-9db41d0ada)
The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-9db41d0ada advisory. Update safetensors to 0.8.0 and build the Python extension using PyO3 0.29, which fixes RUSTSEC-2026-0176 and RUSTSEC-2026-0177. Tenable has extracted the...
CVE-2026-35050
text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.1.1, users can save extention settings in "py" format and in the app root directory. This allows to overwrite python files, for instance the "download-model.py" file could be overwritten. Then, thi...
EUVD-2026-14478
cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loads...
CVE-2026-26209
cbor2 provides encoding and decoding for the Concise Binary Object Representation CBOR serialization format. Versions prior to 5.9.0 are vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion when decoding deeply nested CBOR structures. This vulnerability affects both the...
CVE-2026-26209
cbor2 provides encoding and decoding for the Concise Binary Object Representation CBOR serialization format. Versions prior to 5.9.0 are vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion when decoding deeply nested CBOR structures. This vulnerability affects both the...
CVE-2026-26209
cbor2 provides encoding and decoding for the Concise Binary Object Representation CBOR serialization format. Versions prior to 5.9.0 are vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion when decoding deeply nested CBOR structures. This vulnerability affects both the...
GHSA-WCJ4-JW5J-44WH CBORDecoder reuse can leak shareable values across decode calls
Summary When a CBORDecoder instance is reused across multiple decode operations, values marked with the shareable tag 28 persist in memory and can be accessed by subsequent CBOR messages using the sharedref tag 29. This allows an attacker-controlled message to read data from previously decoded...