1
Cursor 0day: When Full Disclosure Becomes the Only Protection Left
A seven-month-old arbitrary code execution vulnerability remains present in Cursor, leaving 1 million daily users to rely on public disclosure after months of unsuccessful attempts to obtain remediation updates.