5 matches found
CVE-2018-9464
In multiple locations, there is a possible way to read protected files due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-64110 Cursor: Authentication Bypass Possible via New Cursorignore Write
Cursor is a code editor built for programming with AI. In versions 1.7.23 and below, a logic bug allows a malicious agent to read sensitive files that should be protected via cursorignore. An attacker who has already achieved prompt injection, or a malicious model, could create a new cursorignore...
CVE-2018-9464
In multiple locations, there is a possible way to read protected files due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Nozomi Networks Guardian Path Traversal Vulnerability
Nozomi Networks Guardian is an IoT device and software inspection system from Nozomi Networks, Switzerland. Nozomi Networks Guardian 20.0.7.3 version 20.0.7.3 and prior versions. A security vulnerability exists in the Nozomi Networks CMC 20.0.7.3 version 20.0.7.3 and prior versions, which...
sudoedit can expose protected file contents
Overview Sudo's -e option sudoedit improperly handles temporary files, allowing an attacker to read files that would otherwise be inaccessible. Description Sudo is a utility that allows specific users to run certain commands as root. Beginning with version 1.6.8, sudo provides safe editing...