Lucene search
+L

180 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:50 p.m.•22 views

CVE-2026-7318

A vulnerability was detected in elie mcp-project 0.1.0. The affected element is the function searchpapers of the file researchserver.py. The manipulation of the argument topic results in path traversal. Attacking locally is a requirement. The exploit is now public and may be used. The project was...

5.9CVSS5.8AI score0.00228EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/06/05 7:39 p.m.•22 views

CVE-2026-7205

A vulnerability was identified in duartium papers-mcp-server 9ceb3812a6458ba7922ca24a7406f8807bc55598. Impacted is the function searchpapers of the file src/main.py. Such manipulation of the argument topic leads to path traversal. The attack may be launched remotely. The exploit is publicly...

7.5CVSS7AI score0.00587EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/05/29 12:00 a.m.•17 views

Ubuntu 25.10 / 26.04 LTS : Papers vulnerability (USN-8321-1)

The remote Ubuntu 25.10 / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8321-1 advisory. It was discovered that Papers incorrectly handled PDF /GoToR actions. If a user were tricked into opening a specially crafted PDF file, an attacker could...

8.4CVSS6.5AI score0.00415EPSS
SaveExploits1References2
osv-usn
osv-usn
•added 2026/05/27 1:02 p.m.•19 views

USN-8321-1 papers vulnerability

It was discovered that Papers incorrectly handled PDF /GoToR actions. If a user were tricked into opening a specially crafted PDF file, an attacker could use this issue to manipulate command lines and possibly execute arbitrary code...

8.4CVSS6AI score0.00415EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2026/05/19 12:00 a.m.•25 views

Linux Distros Unpatched Vulnerability : CVE-2026-46529

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A single- click remote code execution vulnerability in versions...

8.4CVSS6.5AI score0.00415EPSS
SaveExploits1References4
EUVD
EUVD
•added 2026/05/11 6:31 p.m.•22 views

EUVD-2025-209766

A reflected cross-site scripted XSS vulnerability in the acc-menupapers.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...

6.1CVSS6AI score0.00236EPSS
SaveExploits0References4
NVD
NVD
•added 2026/05/11 4:17 p.m.•21 views

CVE-2025-61307

A reflected cross-site scripted XSS vulnerability in the acc-menupapers.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...

6.1CVSS0.00236EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/05/11 12:00 a.m.•44 views

CVE-2025-61307

A reflected cross-site scripted XSS vulnerability in the acc-menupapers.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...

0.00236EPSS
SaveExploits0References3
CVE
CVE
•added 2026/05/11 12:00 a.m.•27 views

CVE-2025-61307

A reflected cross-site scripted (XSS) vulnerability exists in the acc-menu_papers.php component of GmbH Mecury Managed Print Services (docuForm) version v11.11c . The flaw is caused by the application processing an unfiltered variable value , which allows an attacker to inject a crafted payload a...

6.1CVSS6.4AI score0.00236EPSS
SaveExploits0References3
GithubExploit
GithubExploit
•added 2026/05/01 12:03 a.m.•140 views

exploitdb

The Exploit Database Git Repository This is an official repos...

5.7AI score
SaveExploits0
NVD
NVD
•added 2026/04/29 3:16 p.m.•17 views

CVE-2026-7384

A vulnerability was detected in ezequiroga mcp-bases 357ca19c7a49a9b9cb2ef639b366f03aba8bea39/c630b8ab0f970614d42da8e566e9c0d15a16414c. This impacts the function searchpapers of the file researchserver.py. Performing a manipulation of the argument topic results in path traversal. Remote...

7.5CVSS0.00587EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/04/29 2:30 p.m.•21 views

EUVD-2026-26238

A vulnerability was detected in ezequiroga mcp-bases 357ca19c7a49a9b9cb2ef639b366f03aba8bea39/c630b8ab0f970614d42da8e566e9c0d15a16414c. This impacts the function searchpapers of the file researchserver.py. Performing a manipulation of the argument topic results in path traversal. Remote...

7.5CVSS6.8AI score0.00587EPSS
SaveExploits0References5
CVE
CVE
•added 2026/04/29 2:30 p.m.•44 views

CVE-2026-7384

The CVE-2026-7384 entry concerns ezequiroga mcp-bases (commit 357ca19c7a49a9b9cb2ef639b366f03aba8bea39/c630b8ab0f970614d42da8e566e9c0d15a16414c). It affects the function search_papers in research_server.py. A path traversal vulnerability is triggered by manipulating the topic argument, leading to...

7.5CVSS6.8AI score0.00587EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/04/29 12:00 a.m.•24 views

MCP Research Assistant 路径遍历漏洞

MCP Research Assistant is a scholarly paper search and analysis tool developed by ezequiroga. MCP Research Assistant has a path traversal vulnerability, which stems from improper handling of the topic parameter in the searchpapers function within the researchserver.py file. This improper handling...

7.5CVSS7.2AI score0.00587EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/29 12:00 a.m.•19 views

PT-2026-35930

A vulnerability was detected in ezequiroga mcp-bases 357ca19c7a49a9b9cb2ef639b366f03aba8bea39/c630b8ab0f970614d42da8e566e9c0d15a16414c. This impacts the function search papers of the file research server.py. Performing a manipulation of the argument topic results in path traversal. Remote...

7.5CVSS6.8AI score0.00587EPSS
SaveExploits0References6
NVD
NVD
•added 2026/04/28 10:16 p.m.•19 views

CVE-2026-7318

A vulnerability was detected in elie mcp-project 0.1.0. The affected element is the function searchpapers of the file researchserver.py. The manipulation of the argument topic results in path traversal. Attacking locally is a requirement. The exploit is now public and may be used. The project was...

5.9CVSS0.00228EPSS
SaveExploits0References4
CVE
CVE
•added 2026/04/28 8:45 p.m.•31 views

CVE-2026-7318

The CVE affects elie mcp-project 0.1.0, specifically the function search_papers in research_server.py. The vulnerability arises from path traversal when manipulating the topic argument. Local access is required for exploitation, and the exploit is publicly available. No remediation or patch detai...

5.9CVSS5.8AI score0.00228EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/04/28 8:45 p.m.•21 views

EUVD-2026-26155

A vulnerability was detected in elie mcp-project 0.1.0. The affected element is the function searchpapers of the file researchserver.py. The manipulation of the argument topic results in path traversal. Attacking locally is a requirement. The exploit is now public and may be used. The project was...

5.9CVSS5.8AI score0.00228EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/04/28 8:45 p.m.•59 views

CVE-2026-7318 elie mcp-project research_server.py search_papers path traversal

A vulnerability was detected in elie mcp-project 0.1.0. The affected element is the function searchpapers of the file researchserver.py. The manipulation of the argument topic results in path traversal. Attacking locally is a requirement. The exploit is now public and may be used. The project was...

5.9CVSS0.00228EPSS
SaveExploits0References4
NVD
NVD
•added 2026/04/28 1:16 a.m.•19 views

CVE-2026-7205

A vulnerability was identified in duartium papers-mcp-server 9ceb3812a6458ba7922ca24a7406f8807bc55598. Impacted is the function searchpapers of the file src/main.py. Such manipulation of the argument topic leads to path traversal. The attack may be launched remotely. The exploit is publicly...

7.5CVSS0.00587EPSS
SaveExploits0References5
Rows per page
Query Builder