CVE-2026-54504

CVE-2026-54504 affects MCP Documentation Server (@andrea9293/mcp-documentation-server) versions 1.13.0 through 1.13.1 . The root cause is that app.listen(PORT) in src/web-server.ts is called without a host argument, causing the Express server to bind to all interfaces (0.0.0.0:3080) rather than l...

CVE-2026-54504 MCP Documentation Server: Web UI API binds to all interfaces without authentication by default

MCP Documentation Server is a local-first document management and semantic search server for AI coding agents. From 1.13.0 until 1.13.1, the automatically started Web UI in src/server.ts calls startWebServer in src/web-server.ts with STARTWEBUI enabled by default and WEBPORT set to 3080...

PT-2026-71396

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified. This includes alterations to appearance, coordinates, or field duplication...

EUVD-2018-0521

Malware in sbrugna...

Cisco Secure Firewall Management Center 安全漏洞

Cisco Secure Firewall Management Center is a powerful network security management tool from Cisco. Cisco Secure Firewall Management Center suffers from a server-side request forgery vulnerability that stems from improper validation of user-supplied data. An attacker could use this vulnerability t...

SUSE CVE-2018-1000632

dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or...

Deserialization of untrusted data

ODF documents can contain forms to be filled out by the user. Similar to HTML forms, the contained form data can be submitted to a URI, for example, to an external web server. To create submittable forms, ODF implements the XForms W3C standard, which allows data to be submitted without the need f...