CVE-2026-23849 vulnerabilities

Vulnerabilities for packages: filebrowser...

GHSA-W9RV-XC8M-CMQP vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

CVE-2026-0530 vulnerabilities

Vulnerabilities for packages: kibana...

CVE-2025-68385 vulnerabilities

Vulnerabilities for packages: kibana...

GHSA-X89F-99HF-GMR7 vulnerabilities

Vulnerabilities for packages: kibana...

CVE-2025-12653 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce...

CVE-2025-11042 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce, gitlab-workhorse-ce-fips...

CVE-2025-10569 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce, gitlab-workhorse-ce-fips...

CVE-2020-36969

Removed by vendor...

GHSA-XHP4-6G9V-4XVJ vulnerabilities

Vulnerabilities for packages: redis...

GHSA-6RV6-R2F2-GQRC vulnerabilities

Vulnerabilities for packages: python...

GHSA-XP28-3FV9-33C6 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-PRHJ-8562-P8GJ vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2026-22865 vulnerabilities

Vulnerabilities for packages: gradle...

GHSA-9JWR-P39P-HWG2 vulnerabilities

Vulnerabilities for packages: nodejs...

ROS-20260128-73-0052

Vulnerability in kernel-lt related to implementation of incorrect control flow. Exploitation of the vulnerability may allow an attacker to cause a denial of service...

CVE-2025-59729 vulnerabilities

Vulnerabilities for packages: ffmpeg...

GHSA-J382-5JJ3-VW4J vulnerabilities

Vulnerabilities for packages: wildfly...

CVE-2025-15281 vulnerabilities

Vulnerabilities for packages: glibc...

📄 MCPJam 1.4.2 Command Injection

This Metasploit exploit module targets the MCP Model Context Protocol server, specifically exploiting a command injection vulnerability in the /api/mcp/connect endpoint. The vulnerability allows unauthorized remote command execution by sending crafted JSON payloads that are executed by the server...