24 matches found
CVE-2026-50758
Cross Site Scripting vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to execute arbitrary code via the mcp parameter...
CVE-2026-50756
An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the x-ai-provider component...
CVE-2026-50758
The software DayuanJiang next-ai-draw-io version 0.4.13 is susceptible to a Cross Site Scripting (XSS) vulnerability. This flaw allows a remote attacker to execute arbitrary code by manipulating the mcp parameter. The vulnerability is characterized as an improper neutralization of input during we...
CVE-2026-50756
An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the x-ai-provider component...
CVE-2026-50755: Authentication Bypass by Spoofing
An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the X-Forwarded-For header value...
CVE-2026-50755
An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the X-Forwarded-For header value...
CVE-2026-50756
The software DayuanJiang next-ai-draw-io version 0.4.13 contains a vulnerability that allows a remote attacker to obtain sensitive information via the x-ai-provider component. While the impact is categorized as high confidentiality, specific technical details regarding the root cause are not prov...
CVE-2026-50758
Cross Site Scripting vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to execute arbitrary code via the mcp parameter...
CVE-2026-50755
An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the X-Forwarded-For header value...
CVE-2026-50757
Directory Traversal vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allowsa remote attacker to execute arbitrary code via the nex-ai-draw-io/mcp-server...
CVE-2026-50756
An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the x-ai-provider component...
CVE-2026-50756
An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the x-ai-provider component...
PT-2026-62083
Name of the Vulnerable Software and Affected Versions DayuanJiang next-ai-draw-io version 0.4.13 Description A Directory Traversal issue exists in the nex-ai-draw-io/mcp-server component. This flaw allows a remote attacker to execute arbitrary code by traversing directories to access or manipulat...
PT-2026-62084
Name of the Vulnerable Software and Affected Versions DayuanJiang next-ai-draw-io version 0.4.13 Description A Cross Site Scripting XSS issue allows a remote attacker to execute arbitrary code. This is achieved by manipulating the mcp parameter. Recommendations At the moment, there is no...
CVE-2026-50757
Directory Traversal vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allowsa remote attacker to execute arbitrary code via the nex-ai-draw-io/mcp-server...
CVE-2026-50758
Cross Site Scripting vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to execute arbitrary code via the mcp parameter...
CVE-2026-50755
A vulnerability in DayuanJiang next-ai-draw-io version 0.4.13 allows a remote attacker to obtain sensitive information by manipulating the X-Forwarded-For header value. This issue can lead to the disclosure of internal information via header spoofing. Currently, there is no information regarding ...
CVE-2026-50757
Directory Traversal vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allowsa remote attacker to execute arbitrary code via the nex-ai-draw-io/mcp-server...