EUVD-2020-6359

Malware in sbrugna...

EUVD-2025-26488

Malicious code in bioql PyPI...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: fulcio, cloud-provider-gcp-cloud-controller-manager, docker-cli-buildx, gobump, argo-events, buildkitd, lazydocker, aws-application-networking-k8s, clickhouse-operator, kubernetes-csi-driver-hostpath, mongo-tools, nri-f5, pluto, portieris, nginx-prometheus-exporter,...

CVE-2025-58176

Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. In versions 0.9.0 through 0.9.3, there is a one-click Remote Code Execution vulnerability triggered through a custom url value, transport in the JSON object. An attacker can exploit the...

CVE-2025-58176

Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. In versions 0.9.0 through 0.9.3, there is a one-click Remote Code Execution vulnerability triggered through a custom url value, transport in the JSON object. An attacker can exploit the...

CVE-2025-58176 Dive's improper processing of custom urls can lead to Remote Code Execution

Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. In versions 0.9.0 through 0.9.3, there is a one-click Remote Code Execution vulnerability triggered through a custom url value, transport in the JSON object. An attacker can exploit the...

CVE-2025-58176 Dive's improper processing of custom urls can lead to Remote Code Execution

Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. In versions 0.9.0 through 0.9.3, there is a one-click Remote Code Execution vulnerability triggered through a custom url value, transport in the JSON object. An attacker can exploit the...

CVE-2025-58176 Dive's improper processing of custom urls can lead to Remote Code Execution

Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. In versions 0.9.0 through 0.9.3, there is a one-click Remote Code Execution vulnerability triggered through a custom url value, transport in the JSON object. An attacker can exploit the...

PT-2025-35657

Name of the Vulnerable Software and Affected Versions Dive versions 0.9.0 through 0.9.3 Description Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. Versions 0.9.0 through 0.9.3 contain a Remote Code Execution RCE vulnerability triggered by ...

Dive 安全漏洞

Dive is an OpenAgentPlatform open source MCP hosted desktop application. A security vulnerability exists in Dive 0.9.3 and earlier versions that stems from improper handling of custom URLs and could lead to remote code execution...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: wave-fips, verticadb-operator, kubernetes-release, fq, gofumpt, gcp-compute-persistent-disk-csi-driver, kube-metrics-adapter, kubelet-csr-approver-fips, kubeflow-katib, node-feature-discovery-fips, rancher-fleet, crossplane-provider-azure, bazelisk, loki, prometheus,...

CVE-2020-14205

The DiveBook plugin 1.1.4 for WordPress is prone to improper access control in the Log Dive form because it fails to perform authorization checks. An attacker may leverage this issue to manipulate the integrity of dive logs...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: flannel-cni-plugin, wazero, nri-prometheus, secrets-store-csi-driver-provider-gcp, kwok, protoc-gen-go-grpc, up, buildkitd, configmap-reload, nri-f5, mongo-tools, kubevela, kubernetes-dns-node-cache, nri-mongodb, vexctl, kube-bench, metallb, stakater-reloader, thanos...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: flannel-cni-plugin, wazero, nri-prometheus, secrets-store-csi-driver-provider-gcp, kwok, protoc-gen-go-grpc, up, buildkitd, configmap-reload, nri-f5, mongo-tools, kubevela, kubernetes-dns-node-cache, nri-mongodb, vexctl, kube-bench, metallb, stakater-reloader, thanos...

CISA: Chemical Facility Anti-Terrorism Standards (CFATS) Deep Dive

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

Unmasking Prometei: A Deep Dive Into Our MXDR Findings

How does Prometei insidiously operate in a compromised system? This Managed Extended Detection and Response investigation conducted with the help of Trend Vision One provides a comprehensive analysis of the inner workings of this botnet so users can stop the threat in its tracks before it inflict...

GHSA-99PG-GRM5-QQ3V vulnerabilities

Vulnerabilities for packages: dive...

GHSA-99PG-GRM5-QQ3V vulnerabilities

Vulnerabilities for packages: dive...

Exploit for Path Traversal in Wso2 Api_Manager

CVE-2022-29464 A preauth arbitrary file upload that leads t...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: flannel-cni-plugin, wazero, nri-prometheus, secrets-store-csi-driver-provider-gcp, kwok, protoc-gen-go-grpc, up, buildkitd, configmap-reload, nri-f5, mongo-tools, kubevela, kubernetes-dns-node-cache, nri-mongodb, vexctl, kube-bench, metallb, stakater-reloader, thanos...