5219 matches found
GHSA-P6RM-483J-37JF wong2 mcp-cli Command Injection Vulnerability
A flaw has been found in wong2 mcp-cli 1.13.0. Affected is the function redirectToAuthorization of the file /src/oauth/provider.js of the component oAuth Handler. This manipulation causes os command injection. The attack may be initiated remotely. The attack is considered to have high complexity...
OS Command Injection
Overview @wong2/mcp-cli is an A CLI inspector for the Model Context Protocol Affected versions of this package are vulnerable to OS Command Injection via the redirectToAuthorization function in src/oauth/provider.js. Attackers can setup a MCP server with compatible OAuth authorization server...
CVE-2025-9262
A flaw has been found in wong2 mcp-cli 1.13.0. Affected is the function redirectToAuthorization of the file /src/oauth/provider.js of the component oAuth Handler. This manipulation causes os command injection. The attack may be initiated remotely. The attack is considered to have high complexity...
CVE-2025-9262 wong2 mcp-cli oAuth provider.js redirectToAuthorization os command injection
A flaw has been found in wong2 mcp-cli 1.13.0. Affected is the function redirectToAuthorization of the file /src/oauth/provider.js of the component oAuth Handler. This manipulation causes os command injection. The attack may be initiated remotely. The attack is considered to have high complexity...
CVE-2025-9262 wong2 mcp-cli oAuth provider.js redirectToAuthorization os command injection
A flaw has been found in wong2 mcp-cli 1.13.0. Affected is the function redirectToAuthorization of the file /src/oauth/provider.js of the component oAuth Handler. This manipulation causes os command injection. The attack may be initiated remotely. The attack is considered to have high complexity...
mcp-cli 安全漏洞
mcp-cli is a model context protocol checker for Wong2 Personal Developer. A security vulnerability exists in mcp-cli version 1.13.0, which stems from an incorrect operation of the function redirectToAuthorization in the file /src/oauth/provider.js resulting in os command injection...
Linux Distros Unpatched Vulnerability : CVE-2020-13312
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab OAuth endpoint was vulnerable to brute-force attacks through a...
WordPress WPExperts Post SMTP plugin authentication bypass vulnerability
WordPress WPExperts Post SMTP plugin is a plugin for optimizing the WordPress email sending process. The main features include custom email services, email logging, DNS authentication and OAuth authorization. An authentication bypass vulnerability exists in the WordPress WPExperts Post SMTP plugi...
Malicious code in neptunology-test-meteor-oauth (npm)
The package neptunology-test-meteor-oauth was found to contain malicious code...
Malicious code in node-oauth-walkthrough (npm)
The package node-oauth-walkthrough was found to contain malicious code...
Malicious code in bytel-oauth (npm)
The package bytel-oauth was found to contain malicious code...
Malicious code in oortcloud-biohacking-oauth-cladistics (npm)
The package oortcloud-biohacking-oauth-cladistics was found to contain malicious code...
Malicious code in prompts-auth-oauth-markdown-pdf (npm)
The package prompts-auth-oauth-markdown-pdf was found to contain malicious code...
Malicious code in enif-version-exec-oauth (npm)
The package enif-version-exec-oauth was found to contain malicious code...
MAL-2025-14970 Malicious code in astro-postgres-init-oauth (npm)
The package astro-postgres-init-oauth was found to contain malicious code...
MAL-2025-39661 Malicious code in xenon-oauth-quantumfoam-geckodriver (npm)
The package xenon-oauth-quantumfoam-geckodriver was found to contain malicious code...
Malicious code in ruby-kafka-oauth-client (npm)
The package ruby-kafka-oauth-client was found to contain malicious code...
Malicious code in oauth-procyon-sequelize-dendrochronology (npm)
The package oauth-procyon-sequelize-dendrochronology was found to contain malicious code...