9513 matches found
soundcloud-rpc 输入验证错误漏洞
soundcloud-rpc is a music client developed by Richard Habitzreuter, which supports Discord state synchronization and ad blocking. Versions of soundcloud-rpc prior to 0.1.8 had a vulnerability related to input validation errors. This vulnerability stemmed from the execution of song titles containi...
PT-2026-40970
Name of the Vulnerable Software and Affected Versions Fleet versions prior to 4.81.0 Description A denial-of-service DoS issue exists in the gRPC Launcher "PublishLogs" endpoint. Certain unexpected input values are not handled gracefully, which can cause the server process to terminate while...
CVE-2026-44482: Improper Input Validation
soundcloud-rpc is a SoundCloud Client with Discord Rich Presence, Dark Mode, Last.fm and AdBlock support. Prior to 0.1.8, a track title containing an HTML payload executed locally in the Electron app. This means attacker-controlled SoundCloud track metadata can lead to local command execution on...
CVE-2026-44193
OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, the XMLRPC method opnsense.restoreconfigsection fails to sanitize user supplied input leading to Remote Code Execution. This vulnerability is fixed in 26.1.7...
CVE-2026-44193 OPNsense: RCE via XMLRPC endpoint using `opnsense.restore_config_section` method
OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, the XMLRPC method opnsense.restoreconfigsection fails to sanitize user supplied input leading to Remote Code Execution. This vulnerability is fixed in 26.1.7...
CVE-2026-41495
n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to version 2.47.11, when n8n-mcp runs in HTTP transport mode, incoming requests to the POST /mcp endpoint had their request metadata written to server logs regardless of the...
PT-2026-40789
Two CVEs CVE-2026-30889 and CVE-2026-31200 were classic JSON-RPC parser bugs in popular MCP client SDKs. One allowed a server response to set arbitrary properties on the client's session-state object via prototype pollution. The other allowed a server to inject batched…...
com.alibaba:dubbo (2.6.0), com.alibaba:dubbo-remoting-http (>=2.6.1, <=2.6.2) +7 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (8.0.11)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.alibaba:dubbo 2.6.0 - com.alibaba:dubbo-remoting-http =2.6.1, =2.6.1,...
com.github.jsimone:webapp-runner (8.0.39.0), com.rathravane:drumlin (>=1.2.0, <=1.3.0) +9 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.0.39)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.39 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 8.0.39.0 - com.rathravane:drumlin =1.2.0,...
org.apache.dubbo:dubbo-compatible (>=3.2.0-beta.6, <=3.3.0-beta.1), org.apache.dubbo:dubbo-remoting-http (>=3.2.0-beta.6, <=3.3.0-beta.1) +4 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (8.5.87)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.87 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.dubbo:dubbo-compatible =3.2.0-beta.6, =3.2.0-beta.6, =3.2.0-beta....
com.51degrees:geo-location.web.examples.mvc (>=4.4.29, <=4.4.30), com.51degrees:geo-location.web.examples.servlet (>=4.4.29, <=4.4.30) +7 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.5.99)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.99 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.51degrees:geo-location.web.examples.mvc =4.4.29, =4.4.29, =4.4.29,...
com.51degrees:geo-location.web.examples.mvc (>=4.4.26, <=4.4.28), com.51degrees:geo-location.web.examples.servlet (>=4.4.26, <=4.4.28) +7 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (8.5.98)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.98 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.51degrees:geo-location.web.examples.mvc =4.4.26, =4.4.26, =4.4.26,...
org.apache.dubbo:dubbo-compatible (>=3.2.0-beta.6, <=3.3.0-beta.1), org.apache.dubbo:dubbo-remoting-http (>=3.2.0-beta.6, <=3.3.0-beta.1) +4 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (8.5.87)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.87 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.dubbo:dubbo-compatible =3.2.0-beta.6, =3.2.0-beta.6, =3.2.0-beta....
org.apache.dubbo:dubbo-compatible (>=3.2.0-beta.6, <=3.3.0-beta.1), org.apache.dubbo:dubbo-remoting-http (>=3.2.0-beta.6, <=3.3.0-beta.1) +4 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (8.5.87)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.87 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.dubbo:dubbo-compatible =3.2.0-beta.6, =3.2.0-beta.6, =3.2.0-beta....
com.alibaba:dubbo (2.6.0), com.alibaba:dubbo-remoting-http (>=2.6.1, <=2.6.2) +7 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.0.11)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.alibaba:dubbo 2.6.0 - com.alibaba:dubbo-remoting-http =2.6.1, =2.6.1,...
org.apache.dubbo:dubbo-compatible (>=3.2.0-beta.6, <=3.3.0-beta.1), org.apache.dubbo:dubbo-remoting-http (>=3.2.0-beta.6, <=3.3.0-beta.1) +4 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (8.5.87)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.87 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.dubbo:dubbo-compatible =3.2.0-beta.6, =3.2.0-beta.6, =3.2.0-beta....
CVE-2026-5029
A remote code execution vulnerability exists in Code Runner MCP Server when run with the --transport http option, which exposes the /mcp JSON-RPC endpoint without authentication on port 3088. An unauthenticated remote attacker can invoke the run-code MCP tool to supply arbitrary source code and...
CVE-2025-40948
A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.17.1, RUGGEDCOM ROX MX5000RE All versions V2.17.1, RUGGEDCOM ROX RX1400 All versions V2.17.1, RUGGEDCOM ROX RX1500 All versions V2.17.1, RUGGEDCOM ROX RX1501 All versions V2.17.1, RUGGEDCOM ROX RX1510 All versions V2.17.1...
CVE-2025-40948
A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.17.1, RUGGEDCOM ROX MX5000RE All versions V2.17.1, RUGGEDCOM ROX RX1400 All versions V2.17.1, RUGGEDCOM ROX RX1500 All versions V2.17.1, RUGGEDCOM ROX RX1501 All versions V2.17.1, RUGGEDCOM ROX RX1510 All versions V2.17.1...
