Lucene search
+L

3 matches found

OSV
OSV
•added 2026/08/19 11:56 a.m.•14 views

PYSEC-2026-3700 MCP-for-Stata: Stata Command Injection via Unsanitized `package` in `ado_package_install`

Stata Command Injection via Unsanitized package in adopackageinstall Summary The adopackageinstall MCP tool in stata-mcp concatenates user-controlled input directly into a Stata command string without any validation or sanitization. An attacker who can invoke the MCP tool or the equivalent Python...

8.4CVSS6.9AI score0.00252EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/08/12 12:00 a.m.•23 views

PT-2026-76569

Name of the Vulnerable Software and Affected Versions stata-mcp affected versions not specified Description The ado package install tool concatenates user-controlled input into a Stata command string without validation or sanitization. An attacker can embed newline characters in the package...

8.4CVSS6.2AI score0.00252EPSS
SaveExploits0References10
Intel
Intel
•added 2026/08/11 12:00 a.m.•27 views

Intel® PROSet/Wireless WiFi Software Advisory-01422

Summary: Potential security vulnerabilities for some Intel® PROSet/Wireless WiFi Software may allow escalation of privileges or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2026-20789 Description: Improper...

8.8CVSS6.2AI score0.00354EPSS
SaveExploits0
Rows per page
Query Builder