1225860 matches found
CVE-2026-81847 MAA-AI MaaMCP pipeline_tools.py load_pipeline path traversal
A vulnerability was found in MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287. The affected element is the function savepipeline/loadpipeline of the file pipelinetools.py. Performing a manipulation results in path traversal. The attack can be initiated remotely. The exploit has been made public and coul...
CVE-2026-81847
MAA-AI MaaMCP versions up to 1.1.1.dev6+g2e4a41287 are affected by a path traversal vulnerability in the save_pipeline/load_pipeline functions of pipeline_tools.py . The flaw allows a remote attacker with low privileges and user interaction to manipulate file paths, potentially reading or writing...
CVE-2026-81847 MAA-AI MaaMCP pipeline_tools.py load_pipeline path traversal
A vulnerability was found in MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287. The affected element is the function savepipeline/loadpipeline of the file pipelinetools.py. Performing a manipulation results in path traversal. The attack can be initiated remotely. The exploit has been made public and coul...
CVE-2026-81847 MAA-AI MaaMCP pipeline_tools.py load_pipeline path traversal
A vulnerability was found in MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287. The affected element is the function savepipeline/loadpipeline of the file pipelinetools.py. Performing a manipulation results in path traversal. The attack can be initiated remotely. The exploit has been made public and coul...
CVE-2026-81845 arben-adm mcp-sequential-thinking Import Session/Export Session server.py export_session path traversal
A vulnerability has been found in arben-adm mcp-sequential-thinking up to 0.5.0. Impacted is the function importsession/exportsession of the file mcpsequentialthinking/server.py of the component Import Session/Export Session. Such manipulation of the argument filepath leads to path traversal. It ...
CVE-2026-81845
A path traversal vulnerability in arben-adm mcp-sequential-thinking (up to version 0.5.0) affects the import_session/export_session functions in mcp_sequential_thinking/server.py. Manipulating the file_path argument allows an attacker to access files outside the intended directory. The attack can...
CVE-2026-81845 arben-adm mcp-sequential-thinking Import Session/Export Session server.py export_session path traversal
A vulnerability has been found in arben-adm mcp-sequential-thinking up to 0.5.0. Impacted is the function importsession/exportsession of the file mcpsequentialthinking/server.py of the component Import Session/Export Session. Such manipulation of the argument filepath leads to path traversal. It ...
CVE-2026-81845 arben-adm mcp-sequential-thinking Import Session/Export Session server.py export_session path traversal
A vulnerability has been found in arben-adm mcp-sequential-thinking up to 0.5.0. Impacted is the function importsession/exportsession of the file mcpsequentialthinking/server.py of the component Import Session/Export Session. Such manipulation of the argument filepath leads to path traversal. It ...
USN-8666-3: Linux kernel (GCP FIPS) vulnerabilities
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...
USN-8666-3 linux-gcp-fips vulnerabilities
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...
USN-8661-3 linux-fips, linux-gke vulnerabilities
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...
USN-8661-3: Linux kernel vulnerabilities
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...
faraday_burp
Estensione Faraday per Burp Condividi i risultati del tuo lavoro di sicurezza applicativa in Faraday https://faradaysec.com Questa estensione ti permetterà di importare richieste e issue dalla tua Burp Suite in uno spazio di lavoro Faraday. Download Puoi ottenere l'estensione precompilata qui:...
CVE-2026-81837 RooCodeInc Roo-Code ApplyPatchTool ApplyPatchTool.ts path.resolve path traversal
A flaw has been found in RooCodeInc Roo-Code up to 3.51.1. This issue affects the function path.resolve of the file src/core/tools/ApplyPatchTool.ts of the component ApplyPatchTool. This manipulation causes path traversal. It is possible to initiate the attack remotely. The exploit has been...
CVE-2026-81837
A path traversal vulnerability affects RooCodeInc Roo-Code versions up to 3.51.1 , specifically in the path.resolve function within src/core/tools/ApplyPatchTool.ts . The flaw allows remote exploitation with low complexity and no required privileges, though user interaction is needed. A proof-of-...
CVE-2026-81837 RooCodeInc Roo-Code ApplyPatchTool ApplyPatchTool.ts path.resolve path traversal
A flaw has been found in RooCodeInc Roo-Code up to 3.51.1. This issue affects the function path.resolve of the file src/core/tools/ApplyPatchTool.ts of the component ApplyPatchTool. This manipulation causes path traversal. It is possible to initiate the attack remotely. The exploit has been...
CVE-2026-80179 Jwcrypto: jwcrypto: denial of service via malformed jwe tokens
A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed token can force the JWE.deserialize function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of...
CVE-2026-80179
CVE-2026-80179 is a denial of service vulnerability in the jwcrypto Python library. A remote attacker can craft a malformed JSON Web Encryption (JWE) token containing numerous period delimiters that forces the JWE.deserialize() function to allocate excessive memory, triggering a MemoryError . Ser...
CVE-2026-80179
A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed token can force the JWE.deserialize function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of...
CVE-2026-80179 Jwcrypto: jwcrypto: denial of service via malformed jwe tokens
A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed token can force the JWE.deserialize function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of...