6587 matches found
CVE-2025-64109 Cursor CLI Beta: Command Injection via Untrusted MCP Configuration
Cursor is a code editor built for programming with AI. In versions and below, a vulnerability in the Cursor CLI Beta allowed an attacker to achieve remote code execution through the MCP Model Context Protocol server mechanism by uploading a malicious MCP configuration in .cursor/mcp.json file in ...
PT-2025-45063
Name of the Vulnerable Software and Affected Versions Cursor versions prior to 2025.09.17-25b418f Description Cursor is a code editor designed for programming with AI. A flaw in the Cursor CLI Beta could allow a remote attacker to execute code. This is possible through the Model Context Protocol...
GO-2025-4038 Git LFS may write to arbitrary files via crafted symlinks in github.com/git-lfs/git-lfs
Git LFS may write to arbitrary files via crafted symlinks in github.com/git-lfs/git-lfs...
Dynamic binary instrumentation (DBI) with DynamoRio
This blog introduces dynamic binary instrumentation DBI and guides you through building your own DBI tool with the open-source DynamoRIO framework on Windows 11. DBI enables powerful runtime analysis and modification of binaries critical for malware analysis, security auditing, reverse engineerin...
MAL-2025-49377 Malicious code in github.com/boltdb-go/bolt (Git)
--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 1cad7a46a80076eedc2c3c00be0d3215bdfed842f6cc04c238d3b2591b38e2ad This malicious git repository is a typosquat of the legitimate BoltDB Go package. It contains a backdoor that enables remote code executio...
Spring Session Hazelcast: Now Led by Hazelcast Team
It gives me great pleasure to announce that the Spring Session Hazelcast project will now be led by the Hazelcast Team. NOTE: This announcement is in alignment with our announcement Spring Session MongoDB: Now Led by MongoDB Team. For ten years Spring Session has provided the infrastructure for...
CVE-2021-38154
creationtimestamp| type| source ---|---|--- 2025-10-10 10:51:44+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-38154.yaml 2025-10-12 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m2zlw2iwgd2n 2026-05-21...
EUVD-2021-27067
Malware in sbrugna...
EUVD-2021-27172
Malware in sbrugna...
EUVD-2021-27101
Malware in sbrugna...
EUVD-2023-23490
Malicious code in bioql PyPI...
EUVD-2022-6708
Malicious code in bioql PyPI...
EUVD-2022-1269
Malicious code in bioql PyPI...
EUVD-2022-25165
Malicious code in bioql PyPI...
EUVD-2023-3272
Malicious code in bioql PyPI...
EUVD-2022-42669
Malicious code in bioql PyPI...
EUVD-2022-0234
Malicious code in bioql PyPI...
EUVD-2022-0237
Malicious code in bioql PyPI...