curl Releases Security Update For HTTP 2 Upload Memory Vulnerability
curl has released version 8.23.0 to address a High severity HTTP/2 upload vulnerability that could allow memory corruption and potential code execution under specific conditions.
Cursor Vulnerability Allows Malicious Git Repositories to Execute Code on Windows Without User Approval
A newly disclosed Cursor vulnerability allows malicious Git repositories on Windows to execute arbitrary code by placing a fake git.exe file in the project root, with no security patch currently available.
Google Fixes Rogue Agent Flaw In Dialogflow CX That Could Have Enabled Chatbot Hijacking
Google has fixed a critical vulnerability in Dialogflow CX, dubbed Rogue Agent by Varonis, that could have allowed attackers with edit permissions to compromise chatbots, access conversations, and inject malicious responses.
High-Severity Gogs Vulnerability Actively Exploited Across Hundreds Of Instances
Wiz researchers warn of active exploitation of a high-severity Gogs flaw CVE-2025-8110, affecting over 700 instances. Attackers leverage symbolic link bypass and GitHub PATs to gain code execution and cloud access.
