8705 matches found
Exploit for Improper Authentication in Oracle Concurrent_Processing
CVE-2025-61882 & CVE-2025-61884 EDIT: Oracle just disclose...
EUVD-2025-32451
A vulnerability was identified in samanhappy MCPHub up to 0.9.10. This vulnerability affects the function handleSseConnectionfunction of the file src/services/sseService.ts. Such manipulation leads to improper authentication. The attack may be launched remotely. The exploit is publicly available...
Improper Authentication
Overview @samanhappy/mcphub is an A hub server for mcp servers Affected versions of this package are vulnerable to Improper Authentication via the handleSseConnection function. An attacker can gain unauthorized access and potentially compromise confidentiality, integrity, and availability by...
MCPHub 安全漏洞
MCPHub is an MCP server management tool by samanhappy individual developer. A security vulnerability exists in MCPHub version 0.9.10 and earlier, which stems from improper authentication of the handleSseConnectionfunction function in the sseService.ts file, which could lead to a remote attack...
CVE-2025-11287: Improper Authentication
A vulnerability was identified in samanhappy MCPHub up to 0.9.10. This vulnerability affects the function handleSseConnectionfunction of the file src/services/sseService.ts. Such manipulation leads to improper authentication. The attack may be launched remotely. The exploit is publicly available...
CVE-2025-61882: Improper Authentication
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite component: BI Publisher Integration. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication via the http server port. An attacker can retrieve sensitive integration data, such as email addresses, by sending unauthenticated requests to the listening port on localhost. Note: This is only exploitable if th...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication via the http server port. An attacker can retrieve sensitive integration data, such as email addresses, by sending unauthenticated requests to the listening port on localhost. Note: This is only exploitable if th...
EUVD-2023-54815
Malicious code in bioql PyPI...
EUVD-2024-28220
Malicious code in bioql PyPI...
EUVD-2025-23235
Malicious code in bioql PyPI...
EUVD-2022-44836
Malicious code in bioql PyPI...
EUVD-2024-33829
Malicious code in bioql PyPI...
EUVD-2024-39554
Malicious code in bioql PyPI...
EUVD-2024-47236
Malicious code in bioql PyPI...
EUVD-2023-51322
Malicious code in bioql PyPI...
EUVD-2022-15790
Malicious code in bioql PyPI...
EUVD-2023-56185
Malicious code in bioql PyPI...