Lucene search
+L

12506 matches found

CVE
CVE
•added 2025/10/10 7:50 p.m.•65 views

CVE-2025-61929

Cherry Studio is affected by a code-injection vulnerability where the cherrystudio://mcp protocol handler parses base64-encoded configuration data and directly executes the contained command. Affected component paths include src/main/services/ProtocolClient.ts and src/main/services/urlschema/mcp-...

9.6CVSS5.9AI score0.00471EPSS
SaveExploits1References1Affected Software1
osv_cve
osv_cve
•added 2025/10/10 7:50 p.m.•21 views

CVE-2025-61929 Cherry Studio allows one-click on a specific URL to cause a command to execute

Cherry Studio is a desktop client that supports for multiple LLM providers. Cherry Studio registers a custom protocol called cherrystudio://. When handling the MCP installation URL, it parses the base64-encoded configuration data and directly executes the command within it. In the files...

9.6CVSS7AI score
SaveExploits0References3
EUVD
EUVD
•added 2025/10/10 7:50 p.m.•21 views

EUVD-2025-33778

Cherry Studio is a desktop client that supports for multiple LLM providers. Cherry Studio registers a custom protocol called cherrystudio://. When handling the MCP installation URL, it parses the base64-encoded configuration data and directly executes the command within it. In the files...

9.6CVSS5.8AI score0.00471EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/10/10 12:00 a.m.•18 views

PT-2025-41600

Name of the Vulnerable Software and Affected Versions Cherry Studio versions 1.7.0-alpha.4 and earlier Description Cherry Studio is a desktop client supporting multiple LLM providers. It registers a custom protocol, cherrystudio://, and when handling MCP installation URLs, it parses base64-encode...

9.6CVSS6AI score0.00471EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/10 12:00 a.m.•9 views

CVE-2025-61929: Improper Control of Generation of Code

Cherry Studio is a desktop client that supports for multiple LLM providers. Cherry Studio registers a custom protocol called cherrystudio://. When handling the MCP installation URL, it parses the base64-encoded configuration data and directly executes the command within it. In the files...

9.6CVSS5.8AI score0.00471EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2025/10/08 12:00 a.m.•14 views

Microsoft .NET Framework Buffer Overflow DoS

The vulnerability of the Microsoft .NET software platform, Microsoft .NET Framework, and the source code editor Visual Studio is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

10CVSS6.4AI score0.00771EPSS
SaveExploits0References3Affected Software5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2009-1041

Malware in sbrugna...

9.3CVSS6.4AI score0.05757EPSS
SaveExploits2References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2008-4419

Malware in sbrugna...

4.3CVSS6.4AI score0.01507EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2005-3092

Malware in sbrugna...

7.5CVSS6.4AI score0.03253EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2013-3892

Malware in sbrugna...

9.9CVSS8.1AI score0.01595EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2019-9971

Malware in sbrugna...

7.8CVSS7.3AI score0.01086EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2021-13854

Malware in sbrugna...

9.3CVSS7.4AI score0.62164EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2013-3853

Malware in sbrugna...

5CVSS5.8AI score0.01859EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2011-3147

Malware in sbrugna...

7.5CVSS5.8AI score0.02578EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2020-12219

Malware in sbrugna...

5.9CVSS6.8AI score0.02826EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2011-2631

Malware in sbrugna...

7.5CVSS5.8AI score0.02657EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2011-2629

Malware in sbrugna...

7.5CVSS5.8AI score0.02657EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2011-2632

Malware in sbrugna...

7.5CVSS5.8AI score0.01688EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2011-2215

Malware in sbrugna...

4.3CVSS5.8AI score0.01176EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2011-2214

Malware in sbrugna...

9.3CVSS5.8AI score0.01373EPSS
SaveExploits0References7
Rows per page
Query Builder