6114 matches found
EUVD-2025-29547
Malicious code in bioql PyPI...
EUVD-2025-28589
Malicious code in bioql PyPI...
EUVD-2025-28996
Malicious code in bioql PyPI...
EUVD-2025-25754
Malicious code in bioql PyPI...
EUVD-2025-30810
Malicious code in bioql PyPI...
EUVD-2025-26147
Malicious code in bioql PyPI...
EUVD-2022-52310
Malicious code in bioql PyPI...
EUVD-2025-27139
Malicious code in bioql PyPI...
EUVD-2025-25693
Malicious code in bioql PyPI...
EUVD-2025-28304
Malicious code in bioql PyPI...
EUVD-2025-25716
Malicious code in bioql PyPI...
EUVD-2022-46173
Malicious code in bioql PyPI...
EUVD-2024-34548
Malicious code in bioql PyPI...
CVE-2025-61589
Cursor is a code editor built for programming with AI. In versions 1.6 and below, Mermaid a to render diagrams allows embedding images which then get rendered by Cursor in the chat box. An attacker can use this to exfiltrate sensitive information to a third-party attacker controlled server throug...
CVE-2025-61589
CVE-2025-61589 affects Cursor: in versions 1.6 and earlier, Mermaid diagram rendering can embed images that are rendered in the chat box, enabling an attacker to exfiltrate sensitive information to a third‑party server via an image fetch after a prompt injection. The issue requires malicious inpu...
Cursor 安全漏洞
Cursor is an AI code editor from Cursor Open Source. A security vulnerability exists in Cursor 1.7 and earlier versions that stems from a project-specific CLI configuration that overrides the global configuration and could lead to remote code execution...
Cursor 操作系统命令注入漏洞
Cursor is an AI code editor from Cursor open source. An operating system command injection vulnerability exists in Cursor 1.7 and earlier versions, which stems from the possibility that specially crafted commands may be returned during the OAuth authentication process, potentially leading to...
CVE-2025-9697 Ajax WooSearch <= 1.0.0 - Unauthenticated SQL Injection
The Ajax WooSearch WordPress plugin through 1.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...
CVE-2025-10196
The Survey Anyplace plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'surveyanyplaceembed' shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...