Lucene search
+L

260512 matches found

Cvelist
Cvelist
added last week33 views

CVE-2026-67531 FrontMCP: CodeCall sandbox escape -> host RCE via live Zod schema exposure by getTool

FrontMCP is a TypeScript-first framework for the Model Context Protocol MCP. Prior to 1.5.7, the sandboxed codecall:execute tool exposes live host Zod schema instances to the script via getTool, and because Zod v4 defines zod as a non-configurable, non-writable own property, the ECMAScript Proxy...

9.3CVSS0.00434EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added last week9 views

CVE-2026-67531

FrontMCP is a TypeScript-first framework for the Model Context Protocol MCP. Prior to 1.5.7, the sandboxed codecall:execute tool exposes live host Zod schema instances to the script via getTool, and because Zod v4 defines zod as a non-configurable, non-writable own property, the ECMAScript Proxy...

9.3CVSS6.7AI score0.00434EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
added last week13 views

EUVD-2026-53684

FrontMCP is a TypeScript-first framework for the Model Context Protocol MCP. Prior to 1.5.7, the sandboxed codecall:execute tool exposes live host Zod schema instances to the script via getTool, and because Zod v4 defines zod as a non-configurable, non-writable own property, the ECMAScript Proxy...

9.3CVSS6.7AI score0.00434EPSS
SaveExploits0References2
CVE
CVE
added last week68 views

CVE-2026-67531

CVE-2026-67531 affects FrontMCP before 1.5.7. The sandboxed codecall:execute tool could leak live host Zod schema instances to scripts via getTool, and due to Zod v4 _zod being non-configurable/non-writable, the ECMAScript Proxy invariant returned the raw host object. This allowed a script to rea...

9.3CVSS6.7AI score0.00434EPSS
SaveExploits0References2
OSV
OSV
added last week13 views

CVE-2026-67531 FrontMCP: CodeCall sandbox escape -> host RCE via live Zod schema exposure by getTool

FrontMCP is a TypeScript-first framework for the Model Context Protocol MCP. Prior to 1.5.7, the sandboxed codecall:execute tool exposes live host Zod schema instances to the script via getTool, and because Zod v4 defines zod as a non-configurable, non-writable own property, the ECMAScript Proxy...

9.3CVSS6.7AI score
SaveExploits0References4
Patchstack
Patchstack
added last week13 views

NPM: Nuxt: Server-Side Remote Code Execution via Runtime Template Injection in Nuxt Server Island Props

NPM: Nuxt: Server-Side Remote Code Execution via Runtime Template Injection in Nuxt Server Island Props vulnerability discovered by ? in WordPress Npm nuxt versions = 3.4.0, 3.21.10...

8.1CVSS5.7AI score0.00438EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added last week32 views

CVE-2026-71320 Nuxt: Server-Side Remote Code Execution via Runtime Template Injection in Nuxt Server Island Props

Nuxt is an open-source web development framework for Vue.js. From 3.4.0 until 3.21.10 and 4.5.1, an attacker can inject a template key through /nuxtisland/ props into a dynamic component when vue.runtimeCompiler: true is enabled, causing template execution in the Nitro process. This issue is fixe...

8.1CVSS0.00438EPSS
SaveExploits0References5
OSV
OSV
added last week13 views

CVE-2026-71320 Nuxt: Server-Side Remote Code Execution via Runtime Template Injection in Nuxt Server Island Props

Nuxt is an open-source web development framework for Vue.js. From 3.4.0 until 3.21.10 and 4.5.1, an attacker can inject a template key through /nuxtisland/ props into a dynamic component when vue.runtimeCompiler: true is enabled, causing template execution in the Nitro process. This issue is fixe...

8.1CVSS5.6AI score
SaveExploits0References7
Cvelist
Cvelist
added last week32 views

CVE-2026-71319 Nuxt.js Unauthenticated WebSocket RPC Call Leading to Remote Code Execution

Nuxt is an open-source web development framework for Vue.js. Prior to 3.3.1, Nuxt DevTools development mode only exposes a bidirectional RPC channel over the Vite HMR WebSocket via the nuxt:devtools:rpc plugin. On affected versions the channel has no authentication: any client that can reach the...

9.6CVSS0.00324EPSS
SaveExploits0References3
CVE
CVE
added last week121 views

CVE-2026-71319

Nuxt DevTools prior to version 3.3.1 exposes an unauthenticated bidirectional RPC channel over the Vite HMR WebSocket (ws://:/, subprotocol vite-hmr). The channel, via plugin nuxt:devtools:rpc, allows calling RPC methods without token/handshake/origin checks; updateOptions(), clearOptions(), and ...

9.6CVSS5.8AI score0.00324EPSS
SaveExploits0References3
OSV
OSV
added last week9 views

CVE-2026-71319 Nuxt.js Unauthenticated WebSocket RPC Call Leading to Remote Code Execution

Nuxt is an open-source web development framework for Vue.js. Prior to 3.3.1, Nuxt DevTools development mode only exposes a bidirectional RPC channel over the Vite HMR WebSocket via the nuxt:devtools:rpc plugin. On affected versions the channel has no authentication: any client that can reach the...

9.6CVSS5.8AI score
SaveExploits0References5
GithubExploit
GithubExploit
added last week23 views

Exploit for Interpretation Conflict in Wordpress

wp2shell — WordPress Core Pre-Auth RCE CVE-2026-63030 Ba...

9.8CVSS9.2AI score0.95605EPSS
SaveExploits72
Debian
Debian
added last week8 views

[SECURITY] [DLA 4719-1] p7zip security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4719-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler August 05, 2026 https://wiki.debian.org/LTS -...

7.8CVSS7.4AI score0.00939EPSS
SaveExploits2
OSV
OSV
added last week6 views

CVE-2026-8182

IBM Langflow OSS 1.0.0 through 1.10.3 installations allow anyone on the internet to execute arbitrary code on the server without any credentials via 2 HTTP requests...

8.8CVSS6AI score
SaveExploits0References1
NVD
NVD
added last week6 views

CVE-2026-8182

IBM Langflow OSS 1.0.0 through 1.10.3 installations allow anyone on the internet to execute arbitrary code on the server without any credentials via 2 HTTP requests...

8.8CVSS0.00383EPSS
SaveExploits0References1
NVD
NVD
added last week8 views

CVE-2026-17632

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of Python code during AST-based security scanning...

8.8CVSS0.00449EPSS
SaveExploits0References1
NVD
NVD
added last week6 views

CVE-2026-17624

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of module imports...

8.8CVSS0.00376EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added last week8 views

CVE-2026-17624

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of module imports...

8.5CVSS6.1AI score0.00376EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added last week11 views

EUVD-2026-53578

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of module imports...

8.5CVSS6.1AI score0.00376EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added last week8 views

CVE-2026-17633

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to code injection...

8.5CVSS6.1AI score0.00397EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder