7245 matches found
ai-tool-poisoning-guard
ai-tool-poisoning-guard Minimum security-baseline rule for Claude Code, Codex, and Cursor. This free rule closes a real gap in each tool's built-in review. Full ruleset + implementation guide: Gumroad link — coming soon. Your AI coding assistant reviews code. It doesn't review the sentence that...
super-trouper
Super Trouper Un server MCP per il toolkit di reverse engineering Frida. Super Trouper esegue un server MCP su STDIO che espone le capacità di Frida come strumenti per gli agenti di coding. Può connettersi a dispositivi locali, USB e remoti; ispezionare applicazioni e processi; gestire sessioni d...
PT-2026-106273
Name of the Vulnerable Software and Affected Versions Dify versions prior to 1.16.0 Description An authenticated workspace member can modify the status and parameters of another application's MCP server, which could lead to service disruption or data redirection. This occurs because the...
PT-2026-106004
The convert playwright script prompt in the k6 MCP server accepts a file path as its playwright script argument. Paths given in the documented '@'-prefixed form are restricted to the server's current working directory, but a bare path is resolved by a separate undocumented code path that applies ...
Arbitrary file read via the convert_playwright_script prompt in mcp-k6
A caller who can invoke the convertplaywrightscript prompt in mcp-k6 can pass a bare file path as the playwrightscript argument and receive the contents of any file readable by the user running the server, including SSH keys and cloud credentials in that user's home directory path traversal. The...
PT-2026-106232
Name of the Vulnerable Software and Affected Versions Langflow versions prior to 1.10.3 langflow-base versions prior to 0.10.3 lfx versions prior to 1.10.3 Description An issue exists in the MCP stdio transport where the software executes commands and arguments provided in an MCP server...
PT-2026-106234
Name of the Vulnerable Software and Affected Versions Langflow versions 1.6.8 through 1.9.0 Description Langflow fails to properly authorize the resource URI provided to the resources/read endpoint. The read resource function forwards the attacker-controlled URI to handle read resource, which...
CVE-2026-89039: Improper Limitation of a Pathname to a Restricted Directory
A caller who can invoke the convertplaywrightscript prompt in mcp-k6 can pass a bare file path as the playwrightscript argument and receive the contents of any file readable by the user running the server, including SSH keys and cloud credentials in that user's home directory path traversal. The...
PT-2026-106235
Name of the Vulnerable Software and Affected Versions Langflow versions prior to 1.9.0 Description Authenticated users can achieve Remote Code Execution RCE on the server by adding a Model Context Protocol MCP server using the "Stdio" transport. The command field is passed directly to bash -c "ex...
ida-pro-mcp
IDA Pro MCP ⚠️ Archived — superseded by the official Hex-Rays IDA MCP server This project is no longer maintained. On 2026-09-27 Hex-Rays SA released the Official IDA MCP Server and IDA Nexus. Development stopped the same day at 1.0.0a4. For current use, install theirs: uvx ida-hcli mcp install. I...
CVE-2026-52617
CVE-2026-52617 — @sworddut/mcp-ffmpeg-helper: OS command injection via ffmpeg tool options runFFmpegCommand passes a string built from MCP tool parameters to spawn…, shell: true , so shell metacharacters in options, format, codec, pixelFormat or extraOptions execute on the host running the server...
CVE-2026-104402
Insertion of Sensitive Information Into Sent Data vulnerability in farvisun Mindio Magic MCP mindio-magic-mcp allows Retrieve Embedded Sensitive Data.This issue affects Mindio Magic MCP: from n/a through 0.5.6...
claude-project-scanner
Scanner di progetti Claude Skill di Claude Code in sola lettura che analizza progetti di terze parti per individuare rischi di sicurezza noti prima di aprirli. Rileva i pattern di attacco documentati in: CVE-2025-59536 Claude Code Lifecycle Hooks injection CVE-2025-61260 OpenAI Codex CODEXHOME...
CVE-2026-104402
The Mindio Magic MCP WordPress plugin (versions
CVE-2026-104402 WordPress Mindio Magic MCP plugin <= 0.5.6 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in farvisun Mindio Magic MCP mindio-magic-mcp allows Retrieve Embedded Sensitive Data.This issue affects Mindio Magic MCP: from n/a through 0.5.6...
EUVD-2026-92112
Insertion of Sensitive Information Into Sent Data vulnerability in farvisun Mindio Magic MCP mindio-magic-mcp allows Retrieve Embedded Sensitive Data.This issue affects Mindio Magic MCP: from n/a through 0.5.6...
CVE-2026-104402 WordPress Mindio Magic MCP plugin <= 0.5.6 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in farvisun Mindio Magic MCP mindio-magic-mcp allows Retrieve Embedded Sensitive Data.This issue affects Mindio Magic MCP: from n/a through 0.5.6...
litellm-command-injection-security-assessment
CVE-2026-42271 - Iniezione di Comandi MCP nel Gateway AI LiteLLM RCE Report di Cybersecurity in Stile Consulenziale Report professionale di valutazione della vulnerabilità per il rischio di iniezione di comandi in LiteLLM, comprensivo di sintesi esecutiva, impatto tecnico, rimedio e strategia di...
