23249 matches found
MAL-2025-49620 Malicious code in yanti-brengkes77-tititugel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd8c69a43df9dd9bfacffa3e182abc79ff26e4e88f21e007dcff4d8ae3fbe50 The package yanti-brengkes77-tititugel was found to contain malicious code...
Exploit for Reachable Assertion in Open5Gs
Open5GS-CVE-2025-41067-CVE-2025-41068-PoC This repository cont...
CLSA-2025-1762536892 git: Fix of CVE-2024-32020
CVE-2024-32020: refuse local clones of unowned repositories to prevent TOCTOU race conditions...
Malicious Package
Overview SqlDbRepository is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 and...
Acunetix_vulnerability_assessment_tool
Acunetixvulnerabilityassessmenttool !imagehttp...
Soft Serve does not sanitize ANSI escape sequences in user input
Impact In several places where the user can insert data e.g. names, ANSI escape sequences are not being removed, which can then be used, for example, to show fake alerts. In the same token, git messages, when printed, are also not being sanitized. Places in which this was found: 1. Repository...
GHSA-FV2R-R8MP-PG48 Soft Serve does not sanitize ANSI escape sequences in user input
Impact In several places where the user can insert data e.g. names, ANSI escape sequences are not being removed, which can then be used, for example, to show fake alerts. In the same token, git messages, when printed, are also not being sanitized. Places in which this was found: 1. Repository...
CVE-2025-64109
Cursor is a code editor built for programming with AI. In versions and below, a vulnerability in the Cursor CLI Beta allowed an attacker to achieve remote code execution through the MCP Model Context Protocol server mechanism by uploading a malicious MCP configuration in .cursor/mcp.json file in ...
GO-2025-4024 Argo Workflow may expose artifact repository credentials in github.com/argoproj/argo-workflows
Argo Workflow may expose artifact repository credentials in github.com/argoproj/argo-workflows...
GO-2025-4002 Canonical LXD Project Existence Determination Through Error Handling in Image Export Function in github.com/canonical/lxd
Canonical LXD Project Existence Determination Through Error Handling in Image Export Function in github.com/canonical/lxd...
CVE-2025-64109
Cursor is a code editor built for programming with AI. In versions and below, a vulnerability in the Cursor CLI Beta allowed an attacker to achieve remote code execution through the MCP Model Context Protocol server mechanism by uploading a malicious MCP configuration in .cursor/mcp.json file in ...
osbuild-composer security update
132.2-3.0.1 - Switch to UEKR8 repositories for OL9.6 Orabug: 37962207 - Add support to create OpenScap images JIRA: OLDIS-35301 - Simplify repository names JIRA: OLDIS-35893 - Refactor patches to fix some naming and set a correct kernel for Oracle Linux Orabug: 37253643 - Support using OCI...
CVE-2025-64109 Cursor CLI Beta: Command Injection via Untrusted MCP Configuration
Cursor is a code editor built for programming with AI. In versions and below, a vulnerability in the Cursor CLI Beta allowed an attacker to achieve remote code execution through the MCP Model Context Protocol server mechanism by uploading a malicious MCP configuration in .cursor/mcp.json file in ...
PT-2025-45063
Name of the Vulnerable Software and Affected Versions Cursor versions prior to 2025.09.17-25b418f Description Cursor is a code editor designed for programming with AI. A flaw in the Cursor CLI Beta could allow a remote attacker to execute code. This is possible through the Model Context Protocol...
Astra Linux - уязвимость в vim
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...
Astra Linux - уязвимость в vim
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...
Astra Linux - уязвимость в vim
Use After Free in GitHub repository vim/vim prior to 8.2...
Astra Linux - уязвимость в vim
Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646...
