1468 matches found
CVE-2025-61929 Cherry Studio allows one-click on a specific URL to cause a command to execute
Cherry Studio is a desktop client that supports for multiple LLM providers. Cherry Studio registers a custom protocol called cherrystudio://. When handling the MCP installation URL, it parses the base64-encoded configuration data and directly executes the command within it. In the files...
CVE-2025-61929 Cherry Studio allows one-click on a specific URL to cause a command to execute
Cherry Studio is a desktop client that supports for multiple LLM providers. Cherry Studio registers a custom protocol called cherrystudio://. When handling the MCP installation URL, it parses the base64-encoded configuration data and directly executes the command within it. In the files...
EUVD-2025-33778
Cherry Studio is a desktop client that supports for multiple LLM providers. Cherry Studio registers a custom protocol called cherrystudio://. When handling the MCP installation URL, it parses the base64-encoded configuration data and directly executes the command within it. In the files...
PT-2025-41600
Name of the Vulnerable Software and Affected Versions Cherry Studio versions 1.7.0-alpha.4 and earlier Description Cherry Studio is a desktop client supporting multiple LLM providers. It registers a custom protocol, cherrystudio://, and when handling MCP installation URLs, it parses base64-encode...
EUVD-2017-0017
Malware in sbrugna...
EUVD-2011-1078
Malware in sbrugna...
EUVD-2017-0018
Malware in sbrugna...
EUVD-2019-6378
Malware in sbrugna...
EUVD-2025-10772
Malicious code in bioql PyPI...
EUVD-2025-24562
Malicious code in bioql PyPI...
EUVD-2025-7909
Malicious code in bioql PyPI...
EUVD-2024-19683
Malicious code in bioql PyPI...
EUVD-2025-24569
Malicious code in bioql PyPI...
EUVD-2025-24161
Malicious code in bioql PyPI...
CVE-2025-39693
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid a NULL pointer dereference WHY Although unlikely drmatomicgetnewconnectorstate or drmatomicgetoldconnectorstate can return NULL. HOW Check returns before dereference. cherry picked from commit...
AZL-73656 CVE-2025-39693 affecting package kernel for versions less than 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid a NULL pointer dereference WHY Although unlikely drmatomicgetnewconnectorstate or drmatomicgetoldconnectorstate can return NULL. HOW Check returns before dereference. cherry picked from commit...
Malicious code in banana-cherry-tango-ffbbh (npm)
The package banana-cherry-tango-ffbbh was found to contain malicious code...
Malicious code in cherry-banana-juliet-xoyyn (npm)
The package cherry-banana-juliet-xoyyn was found to contain malicious code...