EUVD-2024-3064

Malicious code in bioql PyPI...

EUVD-2023-43075

Malicious code in bioql PyPI...

EUVD-2023-24446

Malicious code in bioql PyPI...

EUVD-2023-23597

Malicious code in bioql PyPI...

EUVD-2022-55223

Malicious code in bioql PyPI...

EUVD-2022-33936

Malicious code in bioql PyPI...

EUVD-2022-33940

Malicious code in bioql PyPI...

EUVD-2021-8751

Malicious code in bioql PyPI...

EUVD-2024-36321

Malicious code in bioql PyPI...

EUVD-2024-3496

Malicious code in bioql PyPI...

EUVD-2025-4127

Malicious code in bioql PyPI...

EUVD-2022-35028

Malicious code in bioql PyPI...

EUVD-2025-0067

Malicious code in bioql PyPI...

EUVD-2024-1974

Malicious code in bioql PyPI...

CVE-2025-61592

Cursor is a code editor built for programming with AI. In versions 1.7 and below, automatic loading of project-specific CLI configuration from the current working directory /.cursor/cli.json could override certain global configurations in Cursor CLI. This allowed users running the CLI inside a...

CVE-2025-61592 Cursor CLI: Arbitrary Code Execution Possible through Permissive CLI Config

Cursor is a code editor built for programming with AI. In versions 1.7 and below, automatic loading of project-specific CLI configuration from the current working directory /.cursor/cli.json could override certain global configurations in Cursor CLI. This allowed users running the CLI inside a...

CVE-2025-61592 Cursor CLI: Arbitrary Code Execution Possible through Permissive CLI Config

Cursor is a code editor built for programming with AI. In versions 1.7 and below, automatic loading of project-specific CLI configuration from the current working directory /.cursor/cli.json could override certain global configurations in Cursor CLI. This allowed users running the CLI inside a...

EUVD-2025-32311

Cursor is a code editor built for programming with AI. In versions 1.7 and below, automatic loading of project-specific CLI configuration from the current working directory /.cursor/cli.json could override certain global configurations in Cursor CLI. This allowed users running the CLI inside a...

CVE-2025-61592

Cursor CLI (versions ≤ 1.7) is vulnerable to Remote Code Execution via automatic loading of project-specific CLI configuration from /.cursor/cli.json that can override global settings. The underlying issue is permissive configuration combined with prompt injection delivered through project rules ...

LegalSim: Multi-Agent Simulation of Legal Systems for Discovering Procedural Exploits

We present LegalSim, a modular multi-agent simulation of adversarial legal proceedings that explores how AI systems can exploit procedural weaknesses in codified rules. Plaintiff and defendant agents choose from a constrained action space for example, discovery requests, motions, meet-and-confer,...