Lucene search
+L

10 matches found

NVD
NVD
•added 2026/08/14 2:16 a.m.•17 views

CVE-2026-19770

A vulnerability was identified in feedmob fm-mcp-servers 0.0.3. Affected by this vulnerability is the function downloadReport of the file src/smadex-reporting/src/index.ts of the component Download Endpoint. The manipulation of the argument downloadUrl leads to server-side request forgery. The...

5.3CVSS0.00145EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/08/14 1:30 a.m.•16 views

CVE-2026-19770 feedmob fm-mcp-servers Download Endpoint index.ts downloadReport server-side request forgery

A vulnerability was identified in feedmob fm-mcp-servers 0.0.3. Affected by this vulnerability is the function downloadReport of the file src/smadex-reporting/src/index.ts of the component Download Endpoint. The manipulation of the argument downloadUrl leads to server-side request forgery. The...

5.3CVSS5.5AI score0.00145EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/08/14 1:30 a.m.•29 views

CVE-2026-19770

A vulnerability was identified in feedmob fm-mcp-servers 0.0.3. Affected by this vulnerability is the function downloadReport of the file src/smadex-reporting/src/index.ts of the component Download Endpoint. The manipulation of the argument downloadUrl leads to server-side request forgery. The...

5.3CVSS5.5AI score0.00145EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2026/08/14 1:30 a.m.•47 views

CVE-2026-19770 feedmob fm-mcp-servers Download Endpoint index.ts downloadReport server-side request forgery

A vulnerability was identified in feedmob fm-mcp-servers 0.0.3. Affected by this vulnerability is the function downloadReport of the file src/smadex-reporting/src/index.ts of the component Download Endpoint. The manipulation of the argument downloadUrl leads to server-side request forgery. The...

5.3CVSS0.00145EPSS
SaveExploits0References5
CVE
CVE
•added 2026/08/14 1:30 a.m.•29 views

CVE-2026-19770

The CVE-2026-19770 entry affects feedmob fm-mcp-servers 0.0.3, specifically the Download Endpoint’s Download Report function (src/smadex-reporting/src/index.ts). The vulnerability arises from manipulation of the downloadUrl argument, enabling server-side request forgery (SSRF). Exploitation is de...

5.3CVSS5.5AI score0.00145EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/14 1:30 a.m.•19 views

EUVD-2026-58563

A vulnerability was identified in feedmob fm-mcp-servers 0.0.3. Affected by this vulnerability is the function downloadReport of the file src/smadex-reporting/src/index.ts of the component Download Endpoint. The manipulation of the argument downloadUrl leads to server-side request forgery. The...

5.3CVSS5.5AI score0.00145EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/14 12:00 a.m.•28 views

PT-2026-71948

A vulnerability was identified in feedmob fm-mcp-servers 0.0.3. Affected by this vulnerability is the function downloadReport of the file src/smadex-reporting/src/index.ts of the component Download Endpoint. The manipulation of the argument downloadUrl leads to server-side request forgery. The...

5.3CVSS5.5AI score0.00145EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/14 12:00 a.m.•12 views

CVE-2026-19770: Server-Side Request Forgery (SSRF)

A vulnerability was identified in feedmob fm-mcp-servers 0.0.3. Affected by this vulnerability is the function downloadReport of the file src/smadex-reporting/src/index.ts of the component Download Endpoint. The manipulation of the argument downloadUrl leads to server-side request forgery. The...

5.3CVSS5.5AI score0.00145EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/03/23 12:00 a.m.•6 views

CVE-2014-2588: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in servlet/downloadReport in McAfee Asset Manager 6.6 allows remote authenticated users to read arbitrary files via a .. dot dot in the reportFileName parameter...

4CVSS6AI score0.07322EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2014/03/23 12:00 a.m.•9 views

PT-2014-4797

Name of the Vulnerable Software and Affected Versions McAfee Asset Manager version 6.6 Description A directory traversal issue exists, allowing remote authenticated users to read arbitrary files. This is achieved by using a .. dot dot in the reportFileName parameter of the servlet/downloadReport...

4CVSS0.07322EPSS
SaveExploits2References9
Rows per page
Query Builder