EUVD-2025-25782

Malicious code in bioql PyPI...

CVE-2025-9190 TCC Bypass via misconfigured Node fuses in Cursor

The configuration of Cursor on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Cursor TCC Transparency, Consent, and Control permissions. Acquired resource access is limited to previously granted permission...

User can share/use/create prompts not permission

Description Users can share/use/create prompts without being granted permission by the admin. This can break application logic and permissions. Proof of Concept 1. Go to acount admin disable function share/use/create prompt. 2. share/use/create prompts with normal user. POST /api/prompts HTTP/1.1...

Launching Citrix Virtual Desktop or App Sessions Prompts via Citrix Workspace App "An Online Application is attempting to access information on a device attached to your computer"

When launching Citrix Virtual Desktops or Apps, users are prompted with: "An Online Application is attempting to access information on a device attached to your computer"...