PT-2026-35586

Name of the Vulnerable Software and Affected Versions ef10007 MLOps MCP version 1.0.0 Description A path traversal issue exists in the save file Tool within the fastmcp server.py file. A remote attacker can manipulate the filename/destination argument to access or overwrite files outside the...

PT-2026-35653

Name of the Vulnerable Software and Affected Versions TencentCloudBase CloudBase-MCP versions prior to 2.17.1 Description Remote manipulation of the req.body.url variable within the openUrl function of the mcp/src/interactive-server.ts file in the open-url component allows for server-side request...

PT-2026-35682

A vulnerability was detected in AgiFlow scaffold-mcp up to 1.0.27. Affected by this issue is some unknown functionality of the file packages/scaffold-mcp/src/server/index.ts of the component write-to-file Tool. The manipulation of the argument file path results in path traversal. The attack may b...

PT-2026-35717

A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected is an unknown function of the file /index.php?page=product. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit has...

PT-2026-35733

A vulnerability was found in D-Link DIR-825M 1.1.12. This issue affects the function sub 414BA8 of the file /boafrm/formWanConfigSetup. The manipulation of the argument submit-url results in buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used...

PT-2026-35726

A vulnerability was determined in SourceCodester Pharmacy Sales and Inventory System 1.0. The impacted element is the function supplier of the file /index.php?page=supplier. Executing a manipulation of the argument Name can lead to cross site scripting. The attack may be performed from remote. Th...

PT-2026-35752

A weakness has been identified in o2oa up to 10.0. This affects the function FileAction of the file FileAction.java of the component URL Fetching. Executing a manipulation of the argument fileUrl can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit ha...

PT-2026-35669

A vulnerability was found in code-projects Coaching Management System 1.0. This affects an unknown function of the file /cims/modules/admin/reply.php of the component POST Handler. Performing a manipulation of the argument complaintreply results in sql injection. It is possible to initiate the...

PT-2026-35662

A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. This vulnerability affects the function delete menu of the file /admin/ajax.php?action=delete menu. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploi...

PT-2026-35814

A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vulnerability is the function save settings of the file /admin/index.php?page=save settings. This manipulation of the argument Name causes cross site scripting. The attack may be initiated remotely. The exploit...

PT-2026-35832

Name of the Vulnerable Software and Affected Versions elinsky execution-system-mcp version 0.1.0 Description A path traversal flaw exists in the add action Tool within the get context file path function of the src/execution system mcp/server.py file. A remote attacker can initiate this attack by...

PT-2026-35830

Name of the Vulnerable Software and Affected Versions Grav CMS versions 1.7.44 through 2.0.0-beta.1 Description An insecure deserialization issue exists in the Cache Value Handler component. The doGet function within the system/src/Grav/Framework/Cache/Adapter/FileCache.php file uses unserialize...

PT-2026-35681

A security vulnerability has been detected in ErlichLiu claude-agent-sdk-master up to b185aa7ff0d864581257008077b4010fca1747bf. Affected by this vulnerability is an unknown functionality of the file app/api/agent-output/route.ts. The manipulation of the argument outputFile leads to path traversal...

PT-2026-35655

Name of the Vulnerable Software and Affected Versions BigSweetPotatoStudio HyperChat versions prior to 2.0.0-alpha.64 Description A server-side request forgery SSRF issue exists in the AI Proxy Middleware component. The fetch function within the packages/core/src/http/aiProxyMiddleware.mts file...

PT-2026-35587

Name of the Vulnerable Software and Affected Versions eghuzefa engineer-your-data versions prior to 0.1.4 Description A path traversal issue exists in the src/server.py file. The manipulation of the WORKSPACE PATH argument within the read file, write file, list files, and file inf functions allow...

PT-2026-35585

Name of the Vulnerable Software and Affected Versions edvardlindelof notes-mcp versions prior to 0.1.5 Description A path traversal issue exists in the notes mcp.py file. Remote attackers can exploit this by manipulating the root dir/path argument to access files and directories outside the...

PT-2026-35574

Name of the Vulnerable Software and Affected Versions duartium papers-mcp-server version 9ceb3812a6458ba7922ca24a7406f8807bc55598 Description A path traversal issue exists in the search papers function within the src/main.py file. This occurs when the topic argument is manipulated, allowing a...

PT-2026-35732

A vulnerability was identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects the function delete expired of the file /ajax.php?action=delete expired. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit i...

PT-2026-35826

Name of the Vulnerable Software and Affected Versions Xuxueli xxl-job versions prior to 3.3.3 Description An issue exists in the OpenAPI Endpoint within the file xxl-job-admin/src/main/java/com/xxl/job/admin/scheduler/openapi/OpenApiController.java. Manipulation of the default token argument lead...

PT-2026-35741

A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts the function save expired of the file /ajax.php?action=save expired. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit...