CVE-2023-50643

CVE-2023-50643 CVE-2023-50643 Un problema in Evernote per macOS v.10.68.2 consente a un attaccante remoto di eseguire codice arbitrario tramite i componenti RunAsNode e enableNodeClilnspectArguments Esiste uno strumento progettato per automatizzare il processo di ricerca di vulnerabilità in...

CVE-2024-23740

CVE-2024-23740 Ein Problem in Kap bis Version 3.6.0 auf macOS ermöglicht es einem entfernten Angreifer, beliebigen Code auszuführen, indem die Einstellungen RunAsNode und enableNodeClilnspectArguments verwendet werden. Es gibt ein Tool, das den Prozess der Suche nach Schwachstellen in Electron...

CVE-2024-23738

CVE-2024-23738 Ein Problem in Postman bis Version 10.22 auf macOS erlaubt einem entfernten Angreifer die Ausführung beliebigen Codes über die Einstellungen RunAsNode und enableNodeClilnspectArguments. Es gibt ein Tool, das den Prozess der Suche nach Schwachstellen in Electron automatisiert:...

CVE-2024-23741

CVE-2024-23741 Un problema in Hyper fino alla versione 3.4.1 su macOS permette a un attaccante remoto di eseguire codice arbitrario tramite le impostazioni RunAsNode e enableNodeClilnspectArguments. Esiste uno strumento progettato per automatizzare il processo di ricerca di vulnerabilità in...

CVE-2024-23739

CVE-2024-23739 Ein Problem in Discord bis Version 0.0.291 auf macOS ermöglicht es einem entfernten Angreifer, beliebigen Code über die RunAsNode- und enableNodeClilnspectArguments-Einstellungen auszuführen. Es gibt ein Tool, das den Prozess der Suche nach Schwachstellen in Electron automatisiert:...

CVE-2023-49314

CVE-2023-49314 O Asana Desktop 2.1.0 no macOS permite injeção de código devido a Fuses específicas do Electron. Há proteção inadequada contra injeção de código por meio de configurações como RunAsNode e enableNodeCliInspectArguments e, portanto, o electroniz3r pode ser usado para realizar um...

CVE-2024-23743

CVE-2024-23743 CVE-2024-23743 Um problema no Notion para MacOS v.3.1.0 permite que um atacante remoto execute código arbitrário através dos componentes RunAsNode e enableNodeClilnspectArguments Existe uma ferramenta projetada para automatizar o processo de busca por vulnerabilidades em electron:...

CVE-2024-23742

CVE-2024-23742 Un problema in Loom fino alla versione 0.196.1 su macOS consente a un attaccante remoto di eseguire codice arbitrario tramite le impostazioni RunAsNode e enableNodeClilnspectArguments. Con questo strumento possiamo verificare se l'App è vulnerabile: Dopo la validazione, possiamo...

CVE-2026-39309 Trilium Notes: macOS TCC Bypass via Prompt Spoofing

Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Electron configuration is vulnerable to TCC Bypass via Prompt Spoofing, allowing local attackers to trigger misleading macOS permission...

EUVD-2025-25782

Malicious code in bioql PyPI...

CVE-2025-9190

The configuration of Cursor on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Cursor TCC Transparency, Consent, and Control permissions. Acquired resource access is limited to previously granted permission...

CVE-2025-53813

The configuration of Nozbe on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Nozbe TCC Transparency, Consent, and Control permissions. Acquired resource access is limited to previously granted permissions ...

CVE-2025-9190 TCC Bypass via misconfigured Node fuses in Cursor

The configuration of Cursor on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Cursor TCC Transparency, Consent, and Control permissions. Acquired resource access is limited to previously granted permission...

CVE-2025-53813 TCC Bypass via misconfigured Node fuses in Nozbe

The configuration of Nozbe on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Nozbe TCC Transparency, Consent, and Control permissions. Acquired resource access is limited to previously granted permissions...

CVE-2025-53813

CVE-2025-53813 affects Nozbe on macOS due to a misconfiguration of the RunAsNode fuse, enabling a local unprivileged attacker to execute code that inherits Nozbe TCC permissions. Acquired resources are limited to user-granted permissions; other access requires a system prompt. The issue is fixed ...

CVE-2025-53813 TCC Bypass via misconfigured Node fuses in Nozbe

The configuration of Nozbe on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Nozbe TCC Transparency, Consent, and Control permissions. Acquired resource access is limited to previously granted permissions...

CVE-2025-53811

CVE-2025-53811 describes a TCC-related bypass in Mosh-Pro on macOS caused by misconfigured RunAsNode fuses. A local, unprivileged attacker could execute arbitrary code that runs with Mosh-Pro’s TCC permissions, limited to permissions the user has already granted. Additional resource access beyond...

PT-2025-34759 · Cursor · Cursor

Name of the Vulnerable Software and Affected Versions: Cursor version 15.4.1 Description: The configuration of Cursor on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Cursor TCC Transparency, Consent, and...

Cursor 安全漏洞

Cursor is an AI code editor from Cursor open source. A security vulnerability exists in Cursor version 15.4.1, which stems from a RunAsNode misconfiguration, and could lead to the execution of arbitrary code by a local attacker...

Mosh-Pro 安全漏洞

Mosh-Pro is a software for image and video processing from Mosh-Pro. A security vulnerability exists in Mosh-Pro version 1.3.2, which stems from a misconfiguration of RunAsNode and could lead to the execution of arbitrary code...