CVE-2026-104120

A server-side request forgery (SSRF) vulnerability exists in the modelcontextprotocol components mcp-server-fetch and mcp-server-everything up to version 2026.6.4 . The flaw is located in the fetch_url function within the file mcp_server_fetch/server.py of the Fetch Tool component. An attacker ca...

CVE-2026-104120 modelcontextprotocol mcp-server-fetch/mcp-server-everything Fetch Tool server.py fetch_url server-side request forgery

A security vulnerability has been detected in modelcontextprotocol mcp-server-fetch and mcp-server-everything up to 2026.6.4. Affected is the function fetchurl of the file mcpserverfetch/server.py of the component Fetch Tool. The manipulation of the argument url/path leads to server-side request...

EUVD-2026-91161

A security vulnerability has been detected in modelcontextprotocol mcp-server-fetch and mcp-server-everything up to 2026.6.4. Affected is the function fetchurl of the file mcpserverfetch/server.py of the component Fetch Tool. The manipulation of the argument url/path leads to server-side request...

PT-2026-104071

Name of the Vulnerable Software and Affected Versions mcp-server-fetch versions prior to 2026.6.4 mcp-server-everything versions prior to 2026.6.4 Description A server-side request forgery SSRF issue exists in the Fetch Tool component. The vulnerability occurs within the fetch url function locate...

gitpython: GitPython: Remote Code Execution via kwarg value smuggling

A flaw was found in GitPython. Attackers can bypass the checkunsafeoptions guard by smuggling git options within single-character keyword argument kwarg values. This allows them to supply specially crafted option dictionaries to various GitPython methods, such as clonefrom or fetch, leading to...

gitpython: GitPython: Information disclosure via environment variable expansion in URL handling

A flaw was found in GitPython. This vulnerability allows a remote attacker to exfiltrate sensitive information, such as environment variables, by crafting malicious URLs. When these URLs are processed during Git operations like fetch or pull, the environment variables are expanded and transmitted...

gitpython: GitPython: Remote Code Execution via kwarg value smuggling

A flaw was found in GitPython. Attackers can bypass the checkunsafeoptions guard by smuggling git options within single-character keyword argument kwarg values. This allows them to supply specially crafted option dictionaries to various GitPython methods, such as clonefrom or fetch, leading to...

CVE-2026-21636

CVE-2026-21636 - Bypass del modelo de permisos UDS/Red de Node.js Resumen de la vulnerabilidad El modelo de permisos de Node.js --permission está diseñado para aislar un proceso restringiendo el acceso al sistema de archivos, procesos hijos, workers y red. CVE-2026-21636 revela que las conexiones...

Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch

SummaryOpen WebUI fetches user-supplied URLs on the server for RAG URL ingestion and web search, and screens the resolved addresses so internal destinations cannot be reached. That screen decided whether a destination was external by asking Python's standard library whether the address is globall...

CVE-2026-102675

A flaw was found in Electron. When an application registers a custom scheme using file or HTTP protocol handlers with Fetch API support enabled but Cross-Origin Resource Sharing CORS disabled, responses remain script-readable across origins. If untrusted content is loaded within the same session,...

halo-cve-2026-67919

rce del plugin de halo desde una url la consola de halo permite a los administradores instalar y actualizar plugins pegando una url. obtiene cualquier url, instala el jar, y el código del jar se ejecuta en el servidor. no hay comprobaciones de esquema, ni de host, sigue redirecciones, y el gestor...

CVE-2026-5061

CVE-2026-5061 Consul Template validaba a dónde apuntaba un enlace simbólico durante la evaluación de la plantilla, pero su posterior obtención de dependencias leía la ruta original. Reorientar el enlace entre esas operaciones convertía una referencia a un archivo dentro del sandbox en una...

Triple_fetch

triplefetch - ianbeer https://bugs.chromium.org/p/project-zero/issues/detail?id=1247 这是针对 CVE-2017-7047 的利用程序，该漏洞是 libxpc 中的一个逻辑错误，允许恶意消息发送者发送由共享内存支持（backed）的 xpcdata 对象。xpc 消息的消费者似乎没有预料到，当接收者正在处理 xpcdata 对象时，其缓冲区的内容可能被发送者修改。 该项目利用 CVE-2017-7047 构建了一个概念验证的远程 lldb debugserver 存根（stub），能够附加到 iOS...

AlmaLinux 9.2 [TuxCare] Security Update: nodejs / nodejs-devel / nodejs-docs / nodejs-full-i18n / etc (ALMALINUX9.2:CLSA-2025:1757609292)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1757609292 advisory. - A vulnerability in Node.js has been identified, allowing for a Denial of Service DoS attack through resource exhaustion when using the fetc...

CentOS Linux 6 [TuxCare] Security Update: kernel / kernel-abi-whitelists / kernel-debug / kernel-debug-devel / etc Multiple Vulnerabilities (CENTOS6:CLSA-2026:1782150058)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1782150058 advisory. - A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause a use-after-free in ext4xattrsetentry function and a...

CVE-2026-103530

The decolua 9Router software (up to version 0.5.55 ) is vulnerable to a server-side request forgery (SSRF) . The flaw exists within the fetch function of the src/shared/utils/ssrfGuard.js file, specifically located in the Search Endpoint component. An attacker can initiate this attack remotely by...

CVE-2026-103530 decolua 9Router Search Endpoint ssrfGuard.js fetch server-side request forgery

A vulnerability was detected in decolua 9Router up to 0.5.55. The affected element is the function fetch of the file src/shared/utils/ssrfGuard.js of the component Search Endpoint. Performing a manipulation of the argument provideroptions.baseUrl results in server-side request forgery. The attack...

CVE-2026-103530 decolua 9Router Search Endpoint ssrfGuard.js fetch server-side request forgery

A vulnerability was detected in decolua 9Router up to 0.5.55. The affected element is the function fetch of the file src/shared/utils/ssrfGuard.js of the component Search Endpoint. Performing a manipulation of the argument provideroptions.baseUrl results in server-side request forgery. The attack...

Server-side Request Forgery (SSRF)

Overview next is a react framework. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the Image Optimization remote fetch, which resolves and requests an allowlisted remote URL without constraining the address that name resolves to, so a host permitted by...

CVE-2025-8110-PoC

CVE-2025-8110 概念验证 Python 概念验证脚本，针对 CVE-2025-8110 — Gogs v0.13.3 UpdateRepoFile 符号链接远程代码执行。单次攻击：恶意 PUT 请求本身触发 git fetch → sshCommand → 反弹 shell。 ⚠️ 仅供教育和授权安全研究使用。 针对你不拥有或未经书面许可测试的系统运行此工具是非法的。 详情 针对 CVE-2025-8110 的 PoC 受影响版本：Gogs v0.13.3 已修复版本：Gogs v0.13.4...