18841 matches found
Lovable VDP: Improper Authorization Leads to Editor can toggle admin-only workspace features (Lovable Cloud)
A vulnerability was discovered where an account with the Editor role could call an API endpoint that disabled workspace-wide admin-only features. This was due to a lack of server-side role checks, allowing a vertical privilege escalation...
CVE-2025-9372
The Ultimate Multi Design Video Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level access, to inject...
CVE-2025-59944
Cursor is a code editor built for programming with AI. Versions 1.6.23 and below contain case-sensitive checks in the way Cursor IDE protects its sensitive files e.g., /.cursor/mcp.json, which allows attackers to modify the content of these files through prompt injection and achieve remote code...
EUVD-2025-32373
Cursor is a code editor built for programming with AI. Versions 1.6.23 and below contain case-sensitive checks in the way Cursor IDE protects its sensitive files e.g., /.cursor/mcp.json, which allows attackers to modify the content of these files through prompt injection and achieve remote code...
EUVD-2025-19144
Malicious code in bioql PyPI...
EUVD-2022-45452
Malicious code in bioql PyPI...
EUVD-2024-48913
Malicious code in bioql PyPI...
EUVD-2025-19162
Malicious code in bioql PyPI...
EUVD-2023-44816
Malicious code in bioql PyPI...
EUVD-2022-45443
Malicious code in bioql PyPI...
EUVD-2023-2316
Malicious code in bioql PyPI...
EUVD-2025-8457
Malicious code in bioql PyPI...
EUVD-2023-46545
Malicious code in bioql PyPI...
EUVD-2023-46524
Malicious code in bioql PyPI...
EUVD-2025-7373
Malicious code in bioql PyPI...
EUVD-2022-40011
Malicious code in bioql PyPI...
EUVD-2024-41433
Malicious code in bioql PyPI...
EUVD-2023-45086
Malicious code in bioql PyPI...