347787 matches found
CVE-2026-76286 Server-Side Request Forgery (SSRF) through Custom API Tools in Splunk MCP Server
In Splunk MCP Server versions below 1.2.1, Splunk MCP Server could send the Splunk platform authentication token of a user who runs a custom Application Programming Interface API tool to the URL configured for that tool. If another user controls that URL, they could capture the token and use it t...
EUVD-2026-94587
In Splunk MCP Server versions below 1.2.1, Splunk MCP Server could send the Splunk platform authentication token of a user who runs a custom Application Programming Interface API tool to the URL configured for that tool. If another user controls that URL, they could capture the token and use it t...
CVE-2026-76286
The Splunk MCP Server is vulnerable to a Server-Side Request Forgery (SSRF) in versions below 1.2.1 . A user with the mcp_tool_execute capability can be induced to run a custom API tool configured by another user. This flaw allows the server to send the executing user's Splunk platform authentica...
it355-lab4-enterprise-lan-security
IT355 Lab 4: 엔터프라이즈 LAN 보안 및 Shellshock 분석 📌 프로젝트 개요 이 저장소는 엔터프라이즈 LAN 환경에 대한 종합적인 보안 평가를 포함합니다. 이 프로젝트의 핵심 초점은 Linux 기반 웹 서버 내의 ShellshockCVE-2014-6271 취약점의 식별, 악용 및 수정이었습니다. 🛠️ 기술 스택 및 도구 - 환경: Fedora Linux서버, Windows호스트/클라이언트 - 네트워킹: Cisco Packet TracerIT/OT 세그멘테이션, NAT, 라우팅 프로토콜 - 서비스:...
Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
Summary Before Langflow 1.10.3, the MCP stdio transport launched whatever command / args a user put in an MCP server configuration, with no allowlist and before 1.10.3 wrapped in bash -c "exec command ...". Any user able to reach the MCP server settings "Settings → MCP Servers → Add MCP Server",...
GHSA-W794-RJ3P-XV45 Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
Summary Before Langflow 1.10.3, the MCP stdio transport launched whatever command / args a user put in an MCP server configuration, with no allowlist and before 1.10.3 wrapped in bash -c "exec command ...". Any user able to reach the MCP server settings "Settings → MCP Servers → Add MCP Server",...
NPM: Ghost: Server-Side Request Forgery in Bookmark Fetching
NPM: Ghost: Server-Side Request Forgery in Bookmark Fetching vulnerability discovered by ? in WordPress Npm ghost versions = 6.54.1, 6.65.0...
EUVD-2026-91667
Next.js has information disclosure in development server's Model Context Protocol endpoint...
GHSA-39W2-RJM5-CHCV Next.js has information disclosure in development server's Model Context Protocol endpoint
The Next.js development server next dev exposes a Model Context Protocol endpoint that does not verify which website a request originates from, allowing a malicious website visited by the developer to read sensitive development data — including the project's location on disk, source code snippets...
NPM: Next.js has information disclosure in development server's Model Context Protocol endpoint
NPM: Next.js has information disclosure in development server's Model Context Protocol endpoint vulnerability discovered by ? in WordPress Npm next versions = 16.0.0, 16.3.8...
Next.js has information disclosure in development server's Model Context Protocol endpoint
The Next.js development server next dev exposes a Model Context Protocol endpoint that does not verify which website a request originates from, allowing a malicious website visited by the developer to read sensitive development data — including the project's location on disk, source code snippets...
Next.js has Server-Side Request Forgery in Image Optimization
Impact An attacker-controlled, allow-listed remote URL can lead to server-side request forgery e.g. to private IPs during Image Optimization. Workaround Audit allow-listed remote URLs in images.remotePatterns see https://nextjs.org/docs/app/getting-started/imagesremote-images for hosts that may n...
GHSA-CJQ9-62Q9-8JV4 Next.js has Server-Side Request Forgery in Image Optimization
Impact An attacker-controlled, allow-listed remote URL can lead to server-side request forgery e.g. to private IPs during Image Optimization. Workaround Audit allow-listed remote URLs in images.remotePatterns see https://nextjs.org/docs/app/getting-started/imagesremote-images for hosts that may n...
NPM: Next.js has Server-Side Request Forgery in Image Optimization
NPM: Next.js has Server-Side Request Forgery in Image Optimization vulnerability discovered by ? in WordPress Npm next versions = 16.0.0, 16.3.8...
GHSA-M382-6JW4-FMP6 Ghost: Path Traversal via Locale Setting
Impact A vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to read JSON files outside of the active theme's directory, potentially exposing server configuration secrets. Vulnerable versions This vulnerability is present in Ghost from v1.20.0 up to...
EUVD-2026-92766
Ghost: Path Traversal via Locale Setting...
Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updates
Impact Deployments using event-driven updates in the Bitbucket Server catalog provider may ingest catalog locations from repositories that are excluded by the provider's configured project, repository, or archived-repository filters. An authenticated Bitbucket Server user who can push to a...
EUVD-2026-93992
Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updates...
GHSA-C36C-CF6R-GHGJ Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updates
Impact Deployments using event-driven updates in the Bitbucket Server catalog provider may ingest catalog locations from repositories that are excluded by the provider's configured project, repository, or archived-repository filters. An authenticated Bitbucket Server user who can push to a...