2057 matches found
serverless MCP Server vulnerable to Command Injection in list-projects tool
Summary A command injection vulnerability exists in the Serverless Framework's built-in MCP server package @serverless/mcp. This vulnerability only affects users of the experimental MCP server feature serverless mcp, which represents less than 0.1% of Serverless Framework users. The core Serverle...
WordPress HT Mega plugin cross-site scripting vulnerability
WordPress HT Mega plugin is an Elementor page builder plugin designed for WordPress websites. The WordPress HT Mega plugin suffers from a cross-site scripting vulnerability that stems from insufficient validation of user-supplied HTML tag name input, which can be exploited by an attacker to execu...
U.S. Dept Of Defense: Cross-Site Scripting via URL on ████████
A Cross-Site Scripting XSS vulnerability was discovered on a specific system through the GET method. The vulnerability allowed the injection of malicious scripts that could be executed. The provided payload demonstrated the vulnerability. The system host and affected products and versions were no...
CVE-2025-12489
evernote-mcp-server openBrowser Command Injection Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of evernote-mcp-server. An attacker must first obtain the ability to execute low-privileged code on the target system in...
EUVD-2012-2154
Malware in sbrugna...
EUVD-2014-1530
Malware in sbrugna...
EUVD-2019-15296
Malware in sbrugna...
EUVD-2021-2230
Malware in sbrugna...
EUVD-2018-0951
Malware in sbrugna...
EUVD-2021-21392
Malware in sbrugna...
EUVD-2019-5331
Malware in sbrugna...
EUVD-2018-0196
Malware in sbrugna...
EUVD-2021-21434
Malware in sbrugna...
EUVD-2020-24489
Malware in sbrugna...
EUVD-2020-17610
Malware in sbrugna...
EUVD-2020-24870
Malware in sbrugna...
EUVD-2012-3319
Malware in sbrugna...
EUVD-2018-1189
Malware in sbrugna...