32 matches found
EUVD-2026-54959
A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component uploaddocument. Performing a manipulation of the argument File results in path traversal. Attacking...
CVE-2026-19372
A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component uploaddocument. Performing a manipulation of the argument File results in path traversal. Attacking...
CVE-2026-19372 Handwriting-OCR handwriting-ocr-mcp-server upload_document index.ts fs.readFileSync path traversal
A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component uploaddocument. Performing a manipulation of the argument File results in path traversal. Attacking...
CVE-2026-19372 Handwriting-OCR handwriting-ocr-mcp-server upload_document index.ts fs.readFileSync path traversal
A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component uploaddocument. Performing a manipulation of the argument File results in path traversal. Attacking...
CVE-2026-19372
A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component uploaddocument. Performing a manipulation of the argument File results in path traversal. Attacking...
CVE-2026-19372
The CVE-2026-19372 entry concerns Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. The vulnerability affects the upload_document component, specifically the function fs.readFileSync in src/index.ts, where manipulating the File argument can trigger path traversal. Local access is required. Both t...
PT-2026-69317
Name of the Vulnerable Software and Affected Versions Handwriting-OCR handwriting-ocr-mcp-server version 0.1.0 Description A path traversal flaw exists in the upload document component within the src/index.ts file. The issue occurs in the fs.readFileSync function when the File argument is...
CVE-2026-19372: Improper Limitation of a Pathname to a Restricted Directory
A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component uploaddocument. Performing a manipulation of the argument File results in path traversal. Attacking...
Capacitive Touchscreens at Risk: A Practical Side-Channel Attack on Smartphones Via Electromagnetic Emanations
Capacitive touchscreens in modern smartphones introduce severe side-channel vulnerabilities. However, existing attacks often require restrictive conditions or invasive measurements. This paper presents TESLA, a novel, contactless electromagnetic EM side-channel attack that exploits inherent EM...
[SECURITY] Fedora 44 Update: qt6-qtvirtualkeyboard-6.10.3-1.fc44
The Qt Virtual Keyboard project provides an input framework and reference key board frontend for Qt 6. Key features include: Customizable keyboard layouts and styles with dynamic switching. Predictive text input with word selection. Character preview and alternative character view. Automatic...
[SECURITY] Fedora 42 Update: qt5-qtvirtualkeyboard-5.15.18-1.fc42
The Qt Virtual Keyboard project provides an input framework and reference key board frontend for Qt 5. Key features include: Customizable keyboard layouts and styles with dynamic switching. Predictive text input with word selection. Character preview and alternative character view. Automatic...
[SECURITY] Fedora 42 Update: qt6-qtvirtualkeyboard-6.9.3-1.fc42
The Qt Virtual Keyboard project provides an input framework and reference key board frontend for Qt 6. Key features include: Customizable keyboard layouts and styles with dynamic switching. Predictive text input with word selection. Character preview and alternative character view. Automatic...
[SECURITY] Fedora 42 Update: qt6-qtvirtualkeyboard-6.9.1-1.fc42
The Qt Virtual Keyboard project provides an input framework and reference key board frontend for Qt 6. Key features include: Customizable keyboard layouts and styles with dynamic switching. Predictive text input with word selection. Character preview and alternative character view. Automatic...
PT-2025-9885
Name of the Vulnerable Software and Affected Versions Samsung Notes versions prior to 4.4.26.71 Description The issue is related to an out-of-bounds read when applying binary handwriting content in Samsung Notes. This allows attackers to read out-of-bounds memory. Recommendations For versions pri...
July 9, 2024—KB5040438 (OS Build 25398.1009)
None None...
Fedora: Security Advisory for qt6-qtvirtualkeyboard (FEDORA-2024-bfb8617ba3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 40 Update: qt6-qtvirtualkeyboard-6.7.1-1.fc40
The Qt Virtual Keyboard project provides an input framework and reference key board frontend for Qt 6. Key features include: Customizable keyboard layouts and styles with dynamic switching. Predictive text input with word selection. Character preview and alternative character view. Automatic...
July 26, 2023—KB5028254 (OS Build 22621.2070) Preview
None None...