7 matches found
MAL-2026-12354 Malicious code in code-analyzer-mcp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41c70b60414be4e045ae4c1eff1ab33b674c78cc9e2eadadfbdca6317de3a251 index.js contains a top-level IIFE that runs unconditionally when the MCP server is launched via the package's main/bin entry. The IIFE spawns calc.e...
CVE-2026-45555 Roslyn CodeLens MCP Server: Untrusted Roslyn Analyzer Execution via get_diagnostics Leads to Arbitrary Code Execution
Roslyn CodeLens MCP Server is a Roslyn-based MCP server providing semantic code intelligence for .NET codebases. From 0.0.9 to 1.17.0, the getdiagnostics MCP tool loads and executes all DiagnosticAnalyzer assemblies referenced by the target solution without any allowlist, signature check, or user...
EUVD-2020-29309
Malware in sbrugna...
EUVD-2023-43707
Malicious code in bioql PyPI...
CVE-2020-8443
In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis ossec-analysisd is vulnerable to an off-by-one heap-based buffer overflow during the cleaning of crafted syslog msgs received from authenticated remote agents and delivered to the analysisd processing queue by...
Update Rollup 4 for System Center 2012 R2 Service Reporting
Update Rollup 4 for System Center 2012 R2 Service Reporting Introduction This article describes the issues that are fixed in Update Rollup 4 for Microsoft System Center 2012 R2 Service Reporting. Additionally, this article contains the installation instructions for Update Rollup 4 for System Cent...
