15420 matches found
aws-mcp-server 操作系统命令注入漏洞
aws-mcp-server is a lightweight service developed by Alexei Ledenev. It enables AI assistants to execute AWS CLI commands through the Model Context Protocol MCP in a secure, containerized environment. aws-mcp-server has an operating system command injection vulnerability, which stems from...
aws-mcp-server 操作系统命令注入漏洞
aws-mcp-server is a lightweight service developed by Alexei Ledenev. It enables AI assistants to execute AWS CLI commands through the Model Context Protocol MCP in a secure, containerized environment. aws-mcp-server has an operating system command injection vulnerability, which stems from...
Linux Distros Unpatched Vulnerability : CVE-2026-40175
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Axios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1 are vulnerable to a specific gadget-style attack chain in...
DEBIAN-CVE-2026-40175
Axios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1 are vulnerable to a specific gadget-style attack chain in which prototype pollution in a third-party dependency may be leveraged to inject unsanitized header values into outbound requests. This...
CVE-2026-40175
Axios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1 are vulnerable to a specific gadget-style attack chain in which prototype pollution in a third-party dependency may be leveraged to inject unsanitized header values into outbound requests. This...
UBUNTU-CVE-2026-40175
Axios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1 are vulnerable to a specific gadget-style attack chain in which prototype pollution in a third-party dependency may be leveraged to inject unsanitized header values into outbound requests. This...
CVE-2026-40175
Axios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1 are vulnerable to a specific gadget-style attack chain in which prototype pollution in a third-party dependency may be leveraged to inject unsanitized header values into outbound requests. This...
UBUNTU-CVE-2026-33551
An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0. Restricted application credentials can create EC2 credentials. By using a restricted application credential to call the EC2 credential creation API, an authenticated user with only a reader role...
GHSA-W53M-3RV6-Q4V9 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-aws, linux-gcp, linux-qemu, linux-vmware...
GHSA-PW2V-CMFH-X2P3 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-aws, linux-gcp, linux-qemu, linux-vmware...
GHSA-WGXF-R68R-7W9H vulnerabilities
Vulnerabilities for packages: linux-azure, linux-aws, linux-gcp, linux-qemu, linux-vmware...
GHSA-G4VW-3HQ5-Q7GR vulnerabilities
Vulnerabilities for packages: linux-azure, linux-aws, linux-gcp, linux-qemu, linux-vmware...
CVE-2026-23171 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-aws, linux-gcp, linux-qemu, linux-vmware...
CVE-2026-23208 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-aws, linux-gcp, linux-qemu, linux-vmware...
GHSA-2MVM-XGM9-R324 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-aws, linux-gcp, linux-qemu, linux-vmware...
GHSA-HQXW-2V34-R7G3 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-aws, linux-gcp, linux-qemu, linux-vmware...
GHSA-692F-C3G3-7699 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-aws, linux-gcp, linux-qemu, linux-vmware...
CVE-2025-39933 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-aws, linux-gcp, linux-qemu, linux-vmware...