126056 matches found
CVE-2026-94046 0215AndrewFeng ACE-MCP MCP Tool getFileSnippet.ts get_file_snippet path traversal
A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is the function getfilesnippet of the file getFileSnippet.ts of the component MCP Tool. Executing a manipulation of the argument projectRootPath/filePath can lead to path traversal. The attack may be...
EUVD-2026-83780
A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is the function getfilesnippet of the file getFileSnippet.ts of the component MCP Tool. Executing a manipulation of the argument projectRootPath/filePath can lead to path traversal. The attack may be...
CVE-2026-94046 0215AndrewFeng ACE-MCP MCP Tool getFileSnippet.ts get_file_snippet path traversal
A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is the function getfilesnippet of the file getFileSnippet.ts of the component MCP Tool. Executing a manipulation of the argument projectRootPath/filePath can lead to path traversal. The attack may be...
CVE-2026-94046 0215AndrewFeng ACE-MCP MCP Tool getFileSnippet.ts get_file_snippet path traversal
A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is the function getfilesnippet of the file getFileSnippet.ts of the component MCP Tool. Executing a manipulation of the argument projectRootPath/filePath can lead to path traversal. The attack may be...
CVE-2026-94044 03-lovepreetSingh MCP route.ts create_file path traversal
A vulnerability was identified in 03-lovepreetSingh MCP up to f95d035c5317fad81af9828286631053ccb23546. This issue affects the function createfile of the file app/api/mcp/route.ts. Such manipulation of the argument filePath/content leads to path traversal. The attack can be launched remotely. The...
CVE-2026-94044 03-lovepreetSingh MCP route.ts create_file path traversal
A vulnerability was identified in 03-lovepreetSingh MCP up to f95d035c5317fad81af9828286631053ccb23546. This issue affects the function createfile of the file app/api/mcp/route.ts. Such manipulation of the argument filePath/content leads to path traversal. The attack can be launched remotely. The...
EUVD-2026-83770
A vulnerability was identified in 03-lovepreetSingh MCP up to f95d035c5317fad81af9828286631053ccb23546. This issue affects the function createfile of the file app/api/mcp/route.ts. Such manipulation of the argument filePath/content leads to path traversal. The attack can be launched remotely. The...
CVE-2026-94044
A path traversal vulnerability affects the create_file function in app/api/mcp/route.ts of the 03-lovepreetSingh MCP project (GitHub). By manipulating the filePath/content argument, a remote attacker with no privileges or user interaction can traverse the filesystem, resulting in low impact on co...
CVE-2026-94037
A weakness has been identified in 00Kisumi00 mcp-file-analyzer up to 84740852f0cf0cf5db4781b1ca6d7c6a6d210405. This affects the function ControlFlowNode of the file main.py of the component analyzecsvdata MCP tool. This manipulation of the argument filename causes path traversal. Remote...
CVE-2026-94037
CVE-2026-94037 affects the mcp-file-analyzer project (by 00Kisumi00) up to commit 84740852 . The vulnerability is a path traversal in the ControlFlowNode function within main.py , part of the analyze_csv_data MCP tool. An attacker can manipulate the filename argument to traverse beyond the intend...
EUVD-2026-83753
A weakness has been identified in 00Kisumi00 mcp-file-analyzer up to 84740852f0cf0cf5db4781b1ca6d7c6a6d210405. This affects the function ControlFlowNode of the file main.py of the component analyzecsvdata MCP tool. This manipulation of the argument filename causes path traversal. Remote...
CVE-2026-94037 00Kisumi00 mcp-file-analyzer analyze_csv_data MCP tool main.py ControlFlowNode path traversal
A weakness has been identified in 00Kisumi00 mcp-file-analyzer up to 84740852f0cf0cf5db4781b1ca6d7c6a6d210405. This affects the function ControlFlowNode of the file main.py of the component analyzecsvdata MCP tool. This manipulation of the argument filename causes path traversal. Remote...
CVE-2026-94037 00Kisumi00 mcp-file-analyzer analyze_csv_data MCP tool main.py ControlFlowNode path traversal
A weakness has been identified in 00Kisumi00 mcp-file-analyzer up to 84740852f0cf0cf5db4781b1ca6d7c6a6d210405. This affects the function ControlFlowNode of the file main.py of the component analyzecsvdata MCP tool. This manipulation of the argument filename causes path traversal. Remote...
OPENSUSE-SU-2026:21891-1 Security update for ant
This update for ant fixes the following issues: - CVE-2021-36374: excessive memory allocation when reading a specially crafted ZIP archive or a derived formats bsc1188469. - CVE-2025-7962: jakarta: improper neutralization of \r and \n UTF-8 characters can lead to SMTP injection bsc1246873. -...
OESA-2026-3950 rsync security update
Rsync is an open source utility that provides fast incremental file transfer. It uses the "rsync algorithm" which provides a very fast method for bringing remote files into sync. It does this by sending just the differences in the files across the link, without requiring that both sets of files a...
OESA-2026-3949 rsync security update
Rsync is an open source utility that provides fast incremental file transfer. It uses the "rsync algorithm" which provides a very fast method for bringing remote files into sync. It does this by sending just the differences in the files across the link, without requiring that both sets of files a...
OESA-2026-3911 tar security update
GNU Tar provides the ability to create tar archives, as well as various other kinds of manipulation. For example, you can use Tar on previously created archives to extract files, to store additional files, or to update or list files which were already stored. Security Fixes: A flaw was found in G...
pterodactyl
Pterodactyl — HackTheBox ウォークスルー プラットフォーム: HackTheBox | OS: Linux 攻撃チェーン サブドメイン上に Pterodactyl Panel が公開されていた。CVE-2025-49132 のパストラバーサルにより、認証なしで Laravel アプリケーションキーとデータベース認証情報が漏洩する。抽出したハッシュをクラックすることで SSH アクセスを取得する。権限昇格は CVE-2025-6018（PAM 環境変数ポイズニングにより偽のグラフィカル polkit セッションを作り出す）と CVE-2025-6019（XFS...
wingdata
Wingdata — HackTheBox ウォークスルー プラットフォーム: HackTheBox | OS: Linux 攻撃チェーン VHost 列挙で WingFTP サーバーを発見。CVE-2025-47812 のコマンドインジェクションで初期アクセスを取得。root 権限は、細工された tar アーカイブを展開する sudo Python リストアスクリプトを経由して取得 — tar のパストラバーサルにより root として任意のファイルを書き込む。 列挙 root@kitploit: nmap -sC -sV wingdata.htb -Pn 22/tcp open ss...