9794 matches found
PT-2025-37050
Name of the Vulnerable Software and Affected Versions: litmusautomation litmus-mcp-server versions through 0.0.1 Description: An issue allows unauthorized attackers to control the target's MCP service through the SSE Server-Sent Events protocol. Recommendations: At the moment, there is no...
CVE-2025-56405
An issue was discovered in litmusautomation litmus-mcp-server thru 0.0.1 allowing unauthorized attackers to control the target's MCP service through the SSE protocol...
Neo4j MCP Clients & Servers 安全漏洞
Neo4j MCP Clients & Servers is a Neo4j Contrib open source protocol for managing large language model contexts. A security vulnerability exists in Neo4j MCP Clients & Servers version 0.3.0, which originates in the SSE service and could lead to the disclosure of sensitive information or the...
CVE-2025-56404
CVE-2025-56404 affects MariaDB MCP 0.1.0. The vulnerability arises from the SSE service lacking user validation, enabling an attacker to gain sensitive information. The data provided indicates a potential information disclosure with CVSS 3.1 vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (base score...
Linux Distros Unpatched Vulnerability : CVE-2015-1125
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The touch-events implementation in WebKit in Apple iOS before 8.3 allows remote attackers to trigger an association between a tap and an unintended web resource...
PT-2025-37048
Name of the Vulnerable Software and Affected Versions: mcp-neo4j version 0.3.0 Description: An issue was discovered that allows attackers to gain sensitive information or execute arbitrary commands via the SSE service. Recommendations: At the moment, there is no information about a newer version...
MCP MariaDB Server 安全漏洞
MCP MariaDB Server is an open source server implementation of the Large Language Model Context Protocol for MariaDB. A security vulnerability exists in MCP MariaDB Server version 0.1.0, which stems from a lack of user authentication for the SSE service and could lead to the disclosure of sensitiv...
CVE-2025-56405
The CVE-2025-56405 entry concerns litmusautomation litmus-mcp-server up to version 0.0.1, where an issue allows unauthorized attackers to control the target MCP service via the SSE protocol. The NVD/SCA records indicate CVSSv3.1 base score 7.5 (High) with NETWORK attack vector, LOW attack complex...
CVE-2025-56406
CVE-2025-56406 affects mcp-neo4j 0.3.0. The issue resides in the SSE service, allowing attackers to obtain sensitive information or execute arbitrary commands. Public details note that authentication is not mandatory for MCP servers and that the MCP server is intended for local environments where...
Embedded Malicious Code
Overview @duckdb/node-bindings is a Node bindings to the DuckDB C API. Affected versions of this package are vulnerable to Embedded Malicious Code. This package version contains malicious code that monitors network traffic when run in a browser and targets crypto transactions. The injected...
CVE-2025-55234
SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make the users subject to elevation of privilege attacks. The SMB Server already supports mechanisms for hardening against...
CVE-2025-40795
creationtimestamp| type| source ---|---|--- 2025-09-09 10:31:45+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lyfjbrw7jv2a 2025-09-09 11:12:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyflkmcwkn26 2025-09-11 10:00:00+00:00| seen|...
CVE-2025-42944
creationtimestamp| type| source ---|---|--- 2025-09-09 04:31:58+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lyev6fz4zw2m 2025-09-09 05:21:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyexwsper52r 2025-09-09 05:41:24+00:00| seen|...
CVE-2025-58445
Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. All versions of Atlantis publicly expose detailed version information through its /status endpoint. This information disclosure could allow attackers to identify and target known...
CVE-2025-58445 Atlantis Exposes Service Version Publicly on /status API Endpoint
Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. All versions of Atlantis publicly expose detailed version information through its /status endpoint. This information disclosure could allow attackers to identify and target known...
CVE-2025-48560
In AndroidManifest.xml, there is a possible way for an app to monitor motion events due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-26450
In onInputEvent of IInputMethodSessionWrapper.java, there is a possible way for an untrusted app to inject key and motion events to the default IME due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction ...
CVE-2025-58881
creationtimestamp| type| source ---|---|--- 2025-09-05 14:47:03+00:00| seen| https://t.me/canyoupwnme/6883 2025-09-05 16:10:48+00:00| seen| https://t.me/canyoupwnme/6887...
CVE-2025-58862
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in George Sexton WordPress Events Calendar Plugin – connectDaily connect-daily-web-calendar allows Stored XSS.This issue affects WordPress Events Calendar Plugin – connectDaily: from n/a through = 1.5...