Lucene search
+L

6 matches found

OSV
OSV
added 2026/05/18 8:26 p.m.17 views

MAL-2026-3835 Malicious code in solana-web3-alt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b3846bb2c80cb984e05f37cddc24548b73067be9aaca692e401a06f7c323e7b9 In specific environments, the package triggers silent code execution during installation. The code to execute is not included in the package. --- Category:...

6.3AI score
Exploits0References1
OSV
OSV
added 2026/05/18 8:23 p.m.9 views

MAL-2026-3834 Malicious code in foundry-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9f62cf5a646cd39640b2be03720a6a2195dc4924813146e9a0d387bafa75c7de In specific environments, the package triggers silent code execution during installation. The code to execute is not included in the package. --- Category:...

6.3AI score
Exploits0References1
The Hacker News
The Hacker News
added 2025/09/12 4:49 a.m.17 views

Cursor AI Code Editor Flaw Enables Silent Code Execution via Malicious Repositories

A security weakness has been disclosed in the artificial intelligence AI-powered code editor Cursor that could trigger code execution when a maliciously crafted repository is opened using the program. The issue stems from the fact that an out-of-the-box security setting is disabled by default,...

9.3CVSS8.3AI score0.00735EPSS
Exploits3
Vulnrichment
Vulnrichment
added 2025/08/14 3:2 p.m.5 views

CVE-2025-7971 Studio 5000 Logix Designer® – Arbitrary Code Execution Vulnerability

A security issues exists within Studio 5000 Logix Designer due to unsafe handling of environment variables. If the specified path lacks a valid file, Logix Designer crashes; However, it may be possible to execute malicious code without triggering a crash...

7.3CVSS7.7AI score0.00124EPSS
Exploits0References1
The Hacker News
The Hacker News
added 2023/08/12 6:3 a.m.72 views

New Python URL Parsing Flaw Could Enable Command Execution Attacks

A high-severity security flaw has been disclosed in the Python URL parsing function that could be exploited to bypass domain or protocol filtering methods implemented with a blocklist, ultimately resulting in arbitrary file reads and command execution. "urlparse has a parsing problem when the...

7.5CVSS8.4AI score0.20459EPSS
Exploits3
OSV
OSV
added 2019/07/17 12:15 p.m.4 views

DEBIAN-CVE-2019-9848

LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc. LibreOffice is typically also bundled with LibreLogo, a programmable turtle vector graphics script, which can be manipulated into executing arbitrar...

9.8CVSS7.5AI score0.31215EPSS
Exploits5References1
Rows per page
Query Builder