EUVD-2026-53293

A flaw was found in the Multicluster Engine for Kubernetes ClusterCurator controller. A tenant administrator with namespace-scoped privileges can exploit this vulnerability by creating a namespaced ClusterCurator. This action inadvertently grants the tenant administrator the ability to mint a tok...

CVE-2026-10059

A flaw was found in the Multicluster Engine for Kubernetes ClusterCurator controller. A tenant administrator with namespace-scoped privileges can exploit this vulnerability by creating a namespaced ClusterCurator. This action inadvertently grants the tenant administrator the ability to mint a tok...

CVE-2026-10059 Cluster-curator-controller: cluster-curator-controller: namespace admin can escalate to cluster-wide curator authority via clustercurator serviceaccount token

A flaw was found in the Multicluster Engine for Kubernetes ClusterCurator controller. A tenant administrator with namespace-scoped privileges can exploit this vulnerability by creating a namespaced ClusterCurator. This action inadvertently grants the tenant administrator the ability to mint a tok...

CVE-2026-10059

The CVE-2026-10059 issue affects the Multicluster Engine for Kubernetes ClusterCurator controller. A tenant administrator with namespace-scoped privileges can create a namespaced ClusterCurator, which inadvertently enables minting a token for a ServiceAccount with cluster-wide administrative auth...

CVE-2025-62742

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Curator.io Curator.io curatorio allows Stored XSS.This issue affects Curator.io: from n/a through = 1.9.5...

CVE-2025-62742

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Curator.io Curator.io curatorio allows Stored XSS.This issue affects Curator.io: from n/a through = 1.9.5...

EUVD-2025-205969

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Curator.Io allows Stored XSS.This issue affects Curator.Io: from n/a through 1.9.5...

WordPress plugin Curator.Io 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-sit...

PT-2025-54323

Name of the Vulnerable Software and Affected Versions Curator.Io versions through 1.9.5 Description A flaw exists in Curator.Io that allows for Stored Cross-site Scripting XSS. This issue involves improper neutralization of input during web page generation. The vulnerability could potentially all...

EUVD-2025-25828

Malicious code in bioql PyPI...

EUVD-2025-3431

Malicious code in bioql PyPI...

CVE-2025-23307

NVIDIA NeMo Curator for all platforms contains a vulnerability where a malicious file created by an attacker could allow code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

Arbitrary Code Injection

Overview nemo-curator is a Scalable Data Preprocessing Tool for Training Large Language Models Affected versions of this package are vulnerable to Arbitrary Code Injection via the processing of malicious files. An attacker can execute arbitrary code, escalate privileges, access sensitive...

CVE-2025-23307

NVIDIA NeMo Curator for all platforms contains a vulnerability where a malicious file created by an attacker could allow code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2025-23307

NVIDIA NeMo Curator for all platforms contains a vulnerability where a malicious file created by an attacker could allow code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2025-23307

NVIDIA NeMo Curator for all platforms contains a vulnerability where a malicious file created by an attacker could allow code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2025-23307

NVIDIA NeMo Curator for all platforms contains a vulnerability where a malicious file created by an attacker could allow code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2025-23307

CVE-2025-23307 affects NVIDIA NeMo Curator (all platforms). The vulnerability arises from processing maliciously crafted files, enabling arbitrary code execution via code injection, with potential for escalation of privileges, information disclosure, and data tampering. Public advisories in multi...

Security Bulletin: NVIDIA NeMo Curator - August 2025

NVIDIA has released a software update for NVIDIA® NeMo Curator To protect your system, download and install the latest NVIDIA Nemo Curator from NVIDIA Github. Go to NVIDIA Product Security...

NVIDIA NeMo Curator 代码注入漏洞

NVIDIA NeMo Curator is a software for building or customizing world base model videos from NVIDIA. NVIDIA NeMo Curator suffers from a code injection vulnerability that originates from a malicious file that could lead to code injection, which in turn could lead to code execution, elevation of...