454 matches found
CVE-2025-62801 FastMCP vulnerable to windows command injection in FastMCP Cursor installer via server_name
FastMCP is the standard framework for building MCP applications. Versions prior to 2.13.0, a command-injection vulnerability lets any attacker who can influence the servername field of an MCP execute arbitrary OS commands on Windows hosts that run fastmcp install cursor. This vulnerability is fix...
PT-2025-44218
Name of the Vulnerable Software and Affected Versions FastMCP versions prior to 2.13.0 Description FastMCP, a framework for building MCP applications, contains a command-injection issue. An attacker who can control the server name field of an MCP can execute arbitrary OS commands on Windows hosts...
FastMCP 操作系统命令注入漏洞
FastMCP is an MCP server builder from the individual developer Jeremiah Lowin. An operating system command injection vulnerability exists in FastMCP versions prior to 2.13.0, which stems from the vulnerability of the servername field to a command injection attack that could result in the executio...
CVE-2025-61132
A Host Header Injection vulnerability in the password reset component in levlaz braindump v0.4.14 allows remote attackers to conduct password reset poisoning and account takeover via manipulation of the Host header when Flask's urlforexternal=True generates reset links without a fixed SERVERNAME...
EUVD-2025-35694
A Host Header Injection vulnerability in the password reset component in levlaz braindump v0.4.14 allows remote attackers to conduct password reset poisoning and account takeover via manipulation of the Host header when Flask's urlforexternal=True generates reset links without a fixed SERVERNAME...
CVE-2025-61132
A Host Header Injection vulnerability in the password reset component in levlaz braindump v0.4.14 allows remote attackers to conduct password reset poisoning and account takeover via manipulation of the Host header when Flask's urlforexternal=True generates reset links without a fixed SERVERNAME...
CVE-2025-61136
A Host Header Injection vulnerability in the password reset component in axewater sharewarez v2.4.3 allows remote attackers to conduct password reset poisoning and account takeover via manipulation of the Host header when Flask's urlforexternal=True generates reset links without a fixed SERVERNAM...
CVE-2025-61132
A Host Header Injection vulnerability in the password reset component in levlaz braindump v0.4.14 allows remote attackers to conduct password reset poisoning and account takeover via manipulation of the Host header when Flask's urlforexternal=True generates reset links without a fixed SERVERNAME...
CVE-2025-61136
A Host Header Injection vulnerability in the password reset component in axewater sharewarez v2.4.3 allows remote attackers to conduct password reset poisoning and account takeover via manipulation of the Host header when Flask's urlforexternal=True generates reset links without a fixed SERVERNAM...
CVE-2025-61132
CVE-2025-61132 describes a Host Header Injection in the password reset component of levlaz braindump v0.4.14. The vulnerability arises when Flask’s url_for(_external=True) generates reset links without a fixed SERVER_NAME, allowing an attacker to manipulate the Host header to perform password res...
CVE-2025-61132
A Host Header Injection vulnerability in the password reset component in levlaz braindump v0.4.14 allows remote attackers to conduct password reset poisoning and account takeover via manipulation of the Host header when Flask's urlforexternal=True generates reset links without a fixed SERVERNAME...
CVE-2025-61136
The CVE-2025-61136 entry describes a Host Header Injection vulnerability in the password reset component of axewater sharewarez v2.4.3. The underlying issue is an unfixed SERVER_NAME causing Flask url_for(_external=True) to generate reset links that can be manipulated via the Host header, enablin...
SharewareZ 安全漏洞
SharewareZ is a game folder conversion tool by Axe Personal Developers. A security vulnerability exists in SharewareZ version 2.4.3, which stems from an unfixed SERVERNAME in the password reset component, which could lead to password reset poisoning and account takeover...
EUVD-2012-1219
Malware in sbrugna...
EUVD-1999-1340
Malware in sbrugna...
EUVD-2020-7192
Malware in sbrugna...
EUVD-2021-14368
Malware in sbrugna...
EUVD-2020-7188
Malware in sbrugna...