7565 matches found
CVE-2025-9262
A flaw has been found in wong2 mcp-cli 1.13.0. Affected is the function redirectToAuthorization of the file /src/oauth/provider.js of the component oAuth Handler. This manipulation causes os command injection. The attack may be initiated remotely. The attack is considered to have high complexity...
CVE-2025-9262
A flaw has been found in wong2 mcp-cli 1.13.0. Affected is the function redirectToAuthorization of the file /src/oauth/provider.js of the component oAuth Handler. This manipulation causes os command injection. The attack may be initiated remotely. The attack is considered to have high complexity...
CVE-2025-9262 wong2 mcp-cli oAuth provider.js redirectToAuthorization os command injection
A flaw has been found in wong2 mcp-cli 1.13.0. Affected is the function redirectToAuthorization of the file /src/oauth/provider.js of the component oAuth Handler. This manipulation causes os command injection. The attack may be initiated remotely. The attack is considered to have high complexity...
CVE-2025-9262 wong2 mcp-cli oAuth provider.js redirectToAuthorization os command injection
A flaw has been found in wong2 mcp-cli 1.13.0. Affected is the function redirectToAuthorization of the file /src/oauth/provider.js of the component oAuth Handler. This manipulation causes os command injection. The attack may be initiated remotely. The attack is considered to have high complexity...
mcp-cli 安全漏洞
mcp-cli is a model context protocol checker for Wong2 Personal Developer. A security vulnerability exists in mcp-cli version 1.13.0, which stems from an incorrect operation of the function redirectToAuthorization in the file /src/oauth/provider.js resulting in os command injection...
CVE-2025-9262: Improper Neutralization of Special Elements used in an OS Command
A flaw has been found in wong2 mcp-cli 1.13.0. Affected is the function redirectToAuthorization of the file /src/oauth/provider.js of the component oAuth Handler. This manipulation causes os command injection. The attack may be initiated remotely. The attack is considered to have high complexity...
Linux Distros Unpatched Vulnerability : CVE-2020-13312
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab OAuth endpoint was vulnerable to brute-force attacks through a...
WordPress WPExperts Post SMTP plugin authentication bypass vulnerability
WordPress WPExperts Post SMTP plugin is a plugin for optimizing the WordPress email sending process. The main features include custom email services, email logging, DNS authentication and OAuth authorization. An authentication bypass vulnerability exists in the WordPress WPExperts Post SMTP plugi...
Malicious code in kaus-oauth-chakra-ui-membrane (npm)
The package kaus-oauth-chakra-ui-membrane was found to contain malicious code...
Malicious code in bytel-oauth (npm)
The package bytel-oauth was found to contain malicious code...
Malicious code in mdx-oauth-google-quark (npm)
The package mdx-oauth-google-quark was found to contain malicious code...
Malicious code in neptunology-test-meteor-oauth (npm)
The package neptunology-test-meteor-oauth was found to contain malicious code...
Malicious code in oauth-web-flow (npm)
The package oauth-web-flow was found to contain malicious code...
Malicious code in registry-oauth-vortex-hapi (npm)
The package registry-oauth-vortex-hapi was found to contain malicious code...
Malicious code in mui-sagitta-comet-oauth (npm)
The package mui-sagitta-comet-oauth was found to contain malicious code...
Malicious code in oauth-hermes-release-it-nebula (npm)
The package oauth-hermes-release-it-nebula was found to contain malicious code...
Malicious code in oauth-walkthrough (npm)
The package oauth-walkthrough was found to contain malicious code...
Malicious code in astro-postgres-init-oauth (npm)
The package astro-postgres-init-oauth was found to contain malicious code...