CVE-2026-6514

creationtimestamp| type| source ---|---|--- 2026-05-14 09:46:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlsjwyll2e2r...

CVE-2017-6514

WordPress 4.7.2 mishandles listings of post authors, which allows remote attackers to obtain sensitive information Path Disclosure via a /wp-json/oembed/1.0/embed?url= request, related to the "authorname":" substring...

EUVD-2018-9409

Malware in sbrugna...

CVE-2025-6514

mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorizationendpoint response URL...

Critical mcp-remote Vulnerability Enables Remote Code Execution, Impacting 437,000+ Downloads

Cybersecurity researchers have discovered a critical vulnerability in the open-source mcp-remote project that could result in the execution of arbitrary operating system OS commands. The vulnerability, tracked as CVE-2025-6514 , carries a CVSS score of 9.6 out of 10.0. "The vulnerability allows...

@wix/mcp-remote (>=0.0.2, <=0.0.6), mtmag (0.0.1) +3 more potentially affected by CVE-2025-6514 via mcp-remote (>=0.0.22, <=0.1.13)

mcp-remote NPM version =0.0.22, =0.0.2, =0.0.694, =0.0.1, =0.0.6 Source cves: CVE-2025-6514 Source advisory: OSV:GHSA-6XPM-GGF7-WC3P...

CVE-2025-6514

creationtimestamp| type| source ---|---|--- 2025-07-09 14:30:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltjzp6d32j2y 2025-07-09 19:28:16+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3ltkke2mlwl2j 2025-07-09 19:30:45+00:00| seen|...

CVE-2025-6514

mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorizationendpoint response URL...

CVE-2025-6514 OS command injection in mcp-remote when connecting to untrusted MCP servers

mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorizationendpoint response URL...

CVE-2025-6514 OS command injection in mcp-remote when connecting to untrusted MCP servers

mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorizationendpoint response URL...

ManageEngine ADSelfService Plus < build 6514 SQLi

According to its self-reported version, the ManageEngine ADSelfService Plus application running on the remote host is prior to build 6514. It is, therefore, affected by an authenticated SQL injection vulnerability in the MFA reports. Note that Nessus has not tested for this issue but has instead...

CVE-2023-6514

creationtimestamp| type| source ---|---|--- 2023-12-30 08:01:49+00:00| seen| https://t.me/ctinow/160777...

CVE-2023-6514

The Bluetooth module of some Huawei Smart Screen products has an identity authentication bypass vulnerability. Successful exploitation of this vulnerability may allow attackers to access restricted functions. Successful exploitation of this vulnerability may allow attackers to access restricted...

CVE-2023-6514

CVE-2023-6514 is a documented identity authentication bypass affecting Huawei Smart Screen Bluetooth modules. Connected sources confirm the vulnerability can allow attackers to access restricted functions without authentication. There is no public exploit description in the provided documents. Th...

CVE-2023-6514

The Bluetooth module of some Huawei Smart Screen products has an identity authentication bypass vulnerability. Successful exploitation of this vulnerability may allow attackers to access restricted functions. Successful exploitation of this vulnerability may allow attackers to access restricted...

Security Advisory - Identity Bypass Vulnerability in Some Huawei Smart Screen Products

The Bluetooth module of some Huawei Smart Screen products has an identity authentication bypass vulnerability. Successful exploitation of this vulnerability may allow attackers to access restricted functions.Vulnerability ID:HWPSIRT-2023-82635 This vulnerability has been assigned a CVE ID:...

CVE-2023-5366

A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to...

SUSE CVE-2020-6514

Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a crafted SCTP stream...

Slackware: Security Advisory (SSA:2020-213-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2020-0318)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...