3 matches found
PYSEC-2026-3700 MCP-for-Stata: Stata Command Injection via Unsanitized `package` in `ado_package_install`
Stata Command Injection via Unsanitized package in adopackageinstall Summary The adopackageinstall MCP tool in stata-mcp concatenates user-controlled input directly into a Stata command string without any validation or sanitization. An attacker who can invoke the MCP tool or the equivalent Python...
PT-2026-76569
Name of the Vulnerable Software and Affected Versions stata-mcp affected versions not specified Description The ado package install tool concatenates user-controlled input into a Stata command string without validation or sanitization. An attacker can embed newline characters in the package...
Intel® PROSet/Wireless WiFi Software Advisory-01422
Summary: Potential security vulnerabilities for some Intel® PROSet/Wireless WiFi Software may allow escalation of privileges or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2026-20789 Description: Improper...