7279 matches found
CVE-2025-11287
CVE-2025-11287 affects samanhappy MCPHub up to version 0.9.10. The vulnerability is in the function handleSseConnectionfunction of src/services/sseService.ts, causing improper authentication. It can be triggered remotely and public exploits exist. Remediation per referenced advisories is to upgra...
Server-side Request Forgery (SSRF)
Overview @samanhappy/mcphub is an A hub server for mcp servers Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the baseUrl argument in the serverController.ts. An attacker can make the server initiate arbitrary requests to internal or external systems by...
CVE-2025-11286 samanhappy MCPHub MCPRouter Service serverController.ts server-side request forgery
A vulnerability was determined in samanhappy MCPHub up to 0.9.10. This affects an unknown part of the file src/controllers/serverController.ts of the component MCPRouter Service. This manipulation of the argument baseUrl causes server-side request forgery. The attack may be initiated remotely. Th...
CVE-2025-11286
CVE-2025-11286 affects samanhappy MCPHub up to version 0.9.10. The flaw is in src/controllers/serverController.ts of the MCPRouter Service, where manipulation of the baseUrl argument enables server-side request forgery (SSRF). Exploitation can be remote; the exploit has been publicly disclosed. T...
CVE-2025-11285 samanhappy MCPHub serverController.ts os command injection
A vulnerability was found in samanhappy MCPHub up to 0.9.10. Affected by this issue is some unknown functionality of the file src/controllers/serverController.ts. The manipulation of the argument command/args results in os command injection. The attack can be launched remotely. The exploit has be...
CVE-2025-11285 samanhappy MCPHub serverController.ts os command injection
A vulnerability was found in samanhappy MCPHub up to 0.9.10. Affected by this issue is some unknown functionality of the file src/controllers/serverController.ts. The manipulation of the argument command/args results in os command injection. The attack can be launched remotely. The exploit has be...
PT-2025-40800
Name of the Vulnerable Software and Affected Versions samanhappy MCPHub versions up to 0.9.10 Description A flaw exists due to improper authentication within the handleSseConnectionfunction function located in the src/services/sseService.ts file. This issue allows for remote attacks, and a public...
EUVD-2025-21393
Malicious code in bioql PyPI...
EUVD-2025-27549
Malicious code in bioql PyPI...
EUVD-2025-31892
Malicious code in bioql PyPI...
EUVD-2021-32216
Malicious code in bioql PyPI...
EUVD-2025-16320
Malicious code in bioql PyPI...
EUVD-2025-19229
Malicious code in bioql PyPI...
EUVD-2025-19718
Malicious code in bioql PyPI...
EUVD-2025-27552
Malicious code in bioql PyPI...
EUVD-2025-29819
Malicious code in bioql PyPI...
EUVD-2025-20823
Malicious code in bioql PyPI...
EUVD-2025-20093
Malicious code in bioql PyPI...