EUVD-2023-2314

Malicious code in bioql PyPI...

EUVD-2024-43918

Malicious code in bioql PyPI...

EUVD-2022-15353

Malicious code in bioql PyPI...

EUVD-2021-29054

Malicious code in bioql PyPI...

EUVD-2025-0074

Malicious code in bioql PyPI...

EUVD-2023-40817

Malicious code in bioql PyPI...

EUVD-2022-44417

Malicious code in bioql PyPI...

EUVD-2022-44429

Malicious code in bioql PyPI...

EUVD-2022-44407

Malicious code in bioql PyPI...

EUVD-2023-48448

Malicious code in bioql PyPI...

CVE-2025-61590

Cursor is a code editor built for programming with AI. Versions 1.6 and below are vulnerable to Remote Code Execution RCE attacks through Visual Studio Code Workspaces. Workspaces allow users to open more than a single folder and save specific settings pretty similar to .vscode/settings.json for...

EUVD-2025-32314

Cursor is a code editor built for programming with AI. Versions 1.6 and below are vulnerable to Remote Code Execution RCE attacks through Visual Studio Code Workspaces. Workspaces allow users to open more than a single folder and save specific settings pretty similar to .vscode/settings.json for...

Cursor 代码注入漏洞

Cursor is an AI code editor from the Cursor open source. A code injection vulnerability exists in Cursor 1.6 and earlier versions, which stems from an attacker being able to modify workspace settings via Visual Studio Code Workspaces, potentially leading to remote code execution...

CVE-2025-61590: Improper Control of Generation of Code

Cursor is a code editor built for programming with AI. Versions 1.6 and below are vulnerable to Remote Code Execution RCE attacks through Visual Studio Code Workspaces. Workspaces allow users to open more than a single folder and save specific settings pretty similar to .vscode/settings.json for...

Minecraft RCON Terminal 安全漏洞

Minecraft RCON Terminal is an extension for Visual Studio Code by Jake T Cooper Personal Developer. A security vulnerability exists in Minecraft RCON Terminal version 2.0.6 and earlier, which stems from the use of the VS Code Configuration API to store passwords in plaintext...

PT-2025-40535

Name of the Vulnerable Software and Affected Versions Cursor versions 1.6 and below Description Cursor, a code editor for programming with AI, is susceptible to Remote Code Execution RCE attacks through Visual Studio Code Workspaces. Workspaces allow users to save specific settings for folders or...

Alert: Malicious PyPI Package soopsocks Infects 2,653 Systems Before Takedown

Cybersecurity researchers have flagged a malicious package on the Python Package Index PyPI repository that claims to offer the ability to create a SOCKS5 proxy service, while also providing a stealthy backdoor-like functionality to drop additional payloads on Windows systems. The deceptive...

The vulnerability of the Agentic AI component of the Visual Studio Code editor allows a hacker to execute arbitrary code.

The vulnerability of the Agentic AI component of the Visual Studio Code editor lies in the lack of measures taken at the control level to protect data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Empowering defenders in the era of agentic AI with Microsoft Sentinel

Microsoft unveils a new wave of security innovation—delivering an agentic platform to protect organizations at scale We are living through a turning point in how organizations work and defend themselves. Across industries, “Frontier Firms” are emerging; these are businesses where humans and AI...

CHAI: Command Hijacking against Embodied AI

Embodied Artificial Intelligence AI promises to handle edge cases in robotic vehicle systems where data is scarce by using common-sense reasoning grounded in perception and action to generalize beyond training distributions and adapt to novel real-world situations. These capabilities, however, al...