Lucene search
K

7 matches found

Github Security Blog
Github Security Blog
added 2026/02/08 3:30 a.m.5 views

mcp-maigret vulnerable to command injection

A vulnerability was determined in BurtTheCoder mcp-maigret up to 1.0.12. This affects an unknown part of the file src/index.ts of the component searchusername. Executing a manipulation of the argument Username can lead to command injection. The attack may be launched remotely. Upgrading to versio...

9.8CVSS5.3AI score0.00194EPSS
Exploits0References10Affected Software1
NVD
NVD
added 2026/02/08 3:15 a.m.4 views

CVE-2026-2130

A vulnerability was determined in BurtTheCoder mcp-maigret up to 1.0.12. This affects an unknown part of the file src/index.ts of the component searchusername. Executing a manipulation of the argument Username can lead to command injection. The attack may be launched remotely. Upgrading to versio...

9.8CVSS0.00194EPSS
Exploits0References8
ATTACKERKB
ATTACKERKB
added 2026/02/08 2:2 a.m.3 views

CVE-2026-2130

A vulnerability was determined in BurtTheCoder mcp-maigret up to 1.0.12. This affects an unknown part of the file src/index.ts of the component searchusername. Executing a manipulation of the argument Username can lead to command injection. The attack may be launched remotely. Upgrading to versio...

6.5CVSS6.2AI score0.00194EPSS
Exploits0References9Affected Software1
CVE
CVE
added 2026/02/08 2:2 a.m.9 views

CVE-2026-2130

BurtTheCoder mcp-maigret (versions up to 1.0.12) contains a command injection flaw in the search_username component. The vulnerability affects an unknown portion of src/index.ts and allows manipulation of the Username argument to execute arbitrary commands, potentially remotely. A fix is availabl...

9.8CVSS6.3AI score0.00194EPSS
Exploits0References8Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/08 12:0 a.m.5 views

PT-2026-6954

Name of the Vulnerable Software and Affected Versions BurtTheCoder mcp-maigret versions through 1.0.12 Description A flaw exists in the component search username within the file src/index.ts. Manipulating the Username argument can result in command injection, potentially allowing for remote...

6.5CVSS5.3AI score0.00194EPSS
Exploits0References10
Positive Technologies
Positive Technologies
added 2024/06/05 12:0 a.m.3 views

PT-2024-10363 · Acquia · Acquia Dam

Name of the Vulnerable Software and Affected Versions: Acquia DAM versions 0.0.0 through 1.0.12 Acquia DAM versions 1.1.0 through 1.1.0-beta2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability in the Acquia DAM module of the Drupal CMS system. This vulnerability...

5.5CVSS7.6AI score0.00072EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2022/11/10 12:0 a.m.6 views

PT-2022-26109 · Ez Systems · Ezplatform-Graphql

Name of the Vulnerable Software and Affected Versions: ezplatform-graphql versions prior to 1.0.13 ezplatform-graphql versions prior to 2.3.12 Description: The issue concerns the exposure of password hashes of users who have created or modified content, typically administrators and editors, throu...

7.5CVSS5.3AI score0.04165EPSS
Exploits1References7
Rows per page
Query Builder