CVE-2026-19288

A vulnerability has been found in astralisone rive-mcp-server-core up to db1d0cc4cd52589116360428b7504fd0ca748b3e. This affects an unknown part of the file packages/mcp-server/src/tools/importRiveFile.ts of the component importRiveFile Flow. Such manipulation of the argument libraryId leads to pa...

CVE-2026-19288

CVE-2026-19288 affects astralisone rive-mcp-server-core (up to the listed commit) with a vulnerability in the importRiveFile Flow, specifically in packages/mcp-server/src/tools/importRiveFile.ts. The root cause is manipulation of the libraryId argument leading to path traversal, exploitable via a...

CVE-2026-19288

A vulnerability has been found in astralisone rive-mcp-server-core up to db1d0cc4cd52589116360428b7504fd0ca748b3e. This affects an unknown part of the file packages/mcp-server/src/tools/importRiveFile.ts of the component importRiveFile Flow. Such manipulation of the argument libraryId leads to pa...

CVE-2026-19288 astralisone rive-mcp-server-core importRiveFile Flow importRiveFile.ts path traversal

A vulnerability has been found in astralisone rive-mcp-server-core up to db1d0cc4cd52589116360428b7504fd0ca748b3e. This affects an unknown part of the file packages/mcp-server/src/tools/importRiveFile.ts of the component importRiveFile Flow. Such manipulation of the argument libraryId leads to pa...

PT-2026-69200

Name of the Vulnerable Software and Affected Versions astralisone rive-mcp-server-core versions up to db1d0cc4cd52589116360428b7504fd0ca748b3e Description A path traversal issue exists in the importRiveFile Flow component within the file packages/mcp-server/src/tools/importRiveFile.ts. A local...

CVE-2026-19288: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been found in astralisone rive-mcp-server-core up to db1d0cc4cd52589116360428b7504fd0ca748b3e. This affects an unknown part of the file packages/mcp-server/src/tools/importRiveFile.ts of the component importRiveFile Flow. Such manipulation of the argument libraryId leads to pa...

EUVD-2010-4880

Malware in sbrugna...

CVE-2025-46338

Audiobookshelf is a self-hosted audiobook and podcast server. Prior to version 2.21.0, an improper input handling vulnerability in the "/api/upload" endpoint allows an attacker to perform a reflected cross-site scripting XSS attack by submitting malicious payloads in the "libraryId" field. The...

CVE-2025-46338: Improper Neutralization of Input During Web Page Generation

Audiobookshelf is a self-hosted audiobook and podcast server. Prior to version 2.21.0, an improper input handling vulnerability in the /api/upload endpoint allows an attacker to perform a reflected cross-site scripting XSS attack by submitting malicious payloads in the libraryId field. The...

ColdGen ColdUserGroup Cross-Site Scripting and SQL Injection Vulnerabilities

ColdGen ColdUserGroup is prone to cross site scripting and SQL injection vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Sql injection

Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbitrary SQL commands via the 1 ArticleID or 2 LibraryID parameter...

CVE-2010-4916: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbitrary SQL commands via the 1 ArticleID or 2 LibraryID parameter...

PT-2011-1851

Name of the Vulnerable Software and Affected Versions ColdGen ColdUserGroup version 1.06 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the ArticleID or LibraryID parameter in the "index.cfm" file. Recommendations For ColdGen ColdUserGroup...

ColdUserGroup 1.06 - Blind SQL Injection

ColdUserGroup 1.06 - Blind SQL Injection !/usr/bin/python ColdGen - coldusergroup v1.06 0day Remote Blind SQL Injection Exploit Vendor: http://www.coldgen.com/ Found by: mrme ----------------------------------------------- Script provided 'as is', without any warranty. Use for educational purpose...

FlipViewer FlipViewerX.dll ActiveX控件多个栈溢出漏洞

FlipViewer是用于阅读FlipBooks电子书的阅读器。 FlipViewer的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用控制用户机器。 FlipViewer的FlipViewerX.dll库所提供的FViewerLoading ActiveX控件在处理UID、Opf、PAGENO、LaunchMode、SubID、BookID、LibraryID、SubURL和LoadOpf属性时存在多个栈溢出漏洞。如果用户受骗访问了恶意站点并向这些属性传送了超长参数的话，就可能触发溢出，导致执行任意指令。 E-Book Systems FlipViewer 4.0...