200 matches found
CVE-2025-63603
A command injection vulnerability exists in the MCP Data Science Server's reading-plus-ai/mcp-server-data-exploration 0.1.6 in the safeeval function src/mcpserverds/server.py:108. The function uses Python's exec to execute user-supplied scripts but fails to restrict the builtins dictionary in the...
CVE-2025-63603
A command injection vulnerability exists in the MCP Data Science Server's reading-plus-ai/mcp-server-data-exploration 0.1.6 in the safeeval function src/mcpserverds/server.py:108. The function uses Python's exec to execute user-supplied scripts but fails to restrict the builtins dictionary in the...
CVE-2025-63603
A command injection vulnerability exists in the MCP Data Science Server's reading-plus-ai/mcp-server-data-exploration 0.1.6 in the safeeval function src/mcpserverds/server.py:108. The function uses Python's exec to execute user-supplied scripts but fails to restrict the builtins dictionary in the...
PT-2025-47331
Name of the Vulnerable Software and Affected Versions MCP Data Science Server version 0.1.6 Description A command injection issue exists in the safe eval function src/mcp server ds/server.py:108 of the software. The function utilizes Python’s exec to run scripts provided by users, but it does not...
EUVD-2025-198042
A command injection vulnerability exists in the MCP Data Science Server's reading-plus-ai/mcp-server-data-exploration 0.1.6 in the safeeval function src/mcpserverds/server.py:108. The function uses Python's exec to execute user-supplied scripts but fails to restrict the builtins dictionary in the...
CVE-2025-64046
OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting XSS in /system/update-run.php...
EUVD-2025-176760
Malicious code in redshift-run-script-chai-koa npm...
EUVD-2025-175734
Malicious code in version-aquarius-run-script-nova npm...
EUVD-2025-176580
Malicious code in run-script-zenith-mantle-blaze npm...
Malicious code in quantumfoam-run-script-troposphere-halley (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c28a5eba8e1702bc9040b8858caf62a7744397b6b2d831244e7b07da5d7c6e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176863
Malicious code in quantumfoam-run-script-troposphere-halley npm...
EUVD-2025-176583
Malicious code in run-script-sagitta-pulsar-alphard npm...
EUVD-2025-180339
Malicious code in arcturus-run-script-hydrogeology-gatsby npm...
EUVD-2025-176649
Malicious code in reveal-md-neptune-run-script-ignite npm...
Malicious code in quark-dotenv-safe-run-script-planckscale (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a6e17931e4aaa6fd168c9dd241a0af9cc5a149837770053fa39c03d71da231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178733
Malicious code in genomics-run-script-auth-neptune npm...
EUVD-2025-180430
Malicious code in antares-aether-run-script-pino-pretty npm...
MAL-2025-185458 Malicious code in antares-aether-run-script-pino-pretty (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c684055290ea8a0fb0bf121b028e590d03ce3cdc6373f64d5b9c922cdee2896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...