Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2026/03/28 11:9 p.m.2 views

CVE-2026-33989

Mobile Next is an MCP server for mobile development and automation. Prior to version 0.0.49, the @mobilenext/mobile-mcp server contains a Path Traversal vulnerability in the mobilesavescreenshot and mobilestartscreenrecording tools. The saveTo and output parameters were passed directly to...

8.1CVSS5.9AI score0.00018EPSS
Exploits1References1
NVD
NVD
added 2026/03/27 10:16 p.m.1 views

CVE-2026-33989

Mobile Next is an MCP server for mobile development and automation. Prior to version 0.0.49, the @mobilenext/mobile-mcp server contains a Path Traversal vulnerability in the mobilesavescreenshot and mobilestartscreenrecording tools. The saveTo and output parameters were passed directly to...

8.1CVSS0.00018EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/03/27 10:3 p.m.1 views

CVE-2026-33989 @mobilenext/mobile-mcp alllows arbitrary file write via Path Traversal in mobile screen capture tools

Mobile Next is an MCP server for mobile development and automation. Prior to version 0.0.49, the @mobilenext/mobile-mcp server contains a Path Traversal vulnerability in the mobilesavescreenshot and mobilestartscreenrecording tools. The saveTo and output parameters were passed directly to...

8.1CVSS5.9AI score0.00018EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2026/03/27 10:3 p.m.0 views

CVE-2026-33989

Mobile Next is an MCP server for mobile development and automation. Prior to version 0.0.49, the @mobilenext/mobile-mcp server contains a Path Traversal vulnerability in the mobilesavescreenshot and mobilestartscreenrecording tools. The saveTo and output parameters were passed directly to...

8.1CVSS5.9AI score0.00018EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2024/05/16 4:15 p.m.12 views

CVE-2024-35185

Minder is a software supply chain security platform. Prior to version 0.0.49, the Minder REST ingester is vulnerable to a denial of service attack via an attacker-controlled REST endpoint that can crash the Minder server. The REST ingester allows users to interact with REST endpoints to fetch dat...

5.3CVSS5.3AI score0.00086EPSS
Exploits0References2
CVE
CVE
added 2024/05/16 3:15 p.m.59 views

CVE-2024-35185

CVE-2024-35185 affects Minder’s REST ingester component in Minder (pre-0.0.49). The vulnerability allows an attacker-controlled remote endpoint to respond with very large bodies, causing Minder to read the entire response into memory and potentially crash the Minder server, resulting in a DoS. Th...

5.3CVSS6.7AI score0.00086EPSS
Exploits0References2
OSV
OSV
added 2024/05/16 3:15 p.m.10 views

CVE-2024-35185 Denial of service of Minder Server with attacker-controlled REST endpoint

Minder is a software supply chain security platform. Prior to version 0.0.49, the Minder REST ingester is vulnerable to a denial of service attack via an attacker-controlled REST endpoint that can crash the Minder server. The REST ingester allows users to interact with REST endpoints to fetch dat...

5.3CVSS5.4AI score0.00086EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/05/16 12:0 a.m.3 views

Minder 安全漏洞

Minder is an open source platform that helps development teams and the open source community build more secure software and prove to others that the software they build is secure. A security vulnerability exists in Minder versions prior to 0.0.49 that stems from a denial-of-service attack that is...

5.3CVSS5.4AI score0.00086EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/05/16 12:0 a.m.3 views

PT-2024-26366 · Minder · Minder

Name of the Vulnerable Software and Affected Versions: Minder versions prior to 0.0.49 Description: Minder is a software supply chain security platform. The Minder REST ingester is vulnerable to a denial of service attack via an attacker-controlled REST endpoint that can crash the Minder server...

5.3CVSS7.3AI score0.00086EPSS
Exploits0References10
Rows per page
Query Builder