CVE-2026-88257

Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beammcp allows an MCP client to reach a tool's dispatch function with arguments that violate the input schema the server advertised. BeamMCP.Schema.validate/2 checked type, required, additionalProperties, enum and numeric...

CVE-2020-10128

CVE-2020-10128 - SearchBlox product before V-9.2.1 is vulnerable to Stored-Cross Site Scripting Product Description: SearchBlox simplifies enterprise search for complex organizations. SearchBlox intuitive and intelligent tools offer out-of-the-box setup, secure encryption, and low total cost of...

OHTS

OHTS CVE-2017-8759 | Vulnerabilidad de ejecución remota de código en .NET Framework 1. Introducción Existe una vulnerabilidad de ejecución remota de código cuando Microsoft .NET Framework procesa entradas no confiables. Un atacante que explotara con éxito esta vulnerabilidad en software que utili...

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413 es una vulnerabilidad crítica de ejecución remota de código en Microsoft Outlook versiones que incluyen Microsoft 365 Apps, Outlook 2016/2019, Office LTSC 2021 antes del parche de febrero de 2024. Permite a un atacante no autenticado eludir la Vista Protegida de Outlook enviando un...

CVE-2024-22641

CVE-2024-22641 Tipo de Vulnerabilidad Denegación de Servicio por Expresión Regular ReDoS Producto y Versión Afectados TCPDF AddPage; $pdf-ImageSVG$file='poc.svg'; ? Nota: Al verificar con preglasterror después de la línea vulnerable de código, la expresión regular saldrá con PREGBACKTRACKLIMITERR...

CVE-2025-63915-There-is-a-Reflected-xss-vulnerability-exists-in-DoraCMS

CVE-2025-63915 Objetivo:https://www.html-js.cn Github:https://github.com/doramart/DoraCMS Versión:V2.1.8 Nombre de la vulnerabilidad:Vulnerabilidad de Cross-Site Scripting Reflejado XSS Reflejado en DoraCMS V2.1.8 CWE-79 Tipo de vulnerabilidad: Cross-Site Scripting Reflejado XSS Reflejado Fecha d...

CVE-2021-40303

CVE-2021-40303 perfex crm 1.10 es vulnerable a Cross Site Scripting XSS Almacenado a través de /clients/profile. poc: POST /clients/profile HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 X11; Linux x8664; rv:78.0 Gecko/20100101 Firefox/78.0 Accept:...

CVE-2026-88257

The beam_mcp library (versions 0.1.0 before 0.10.1 ) contains an Improper Input Validation vulnerability in BeamMCP.Schema . The validate/2 function only enforces constraints (type, required, enum, and numeric bounds) on top-level arguments. Consequently, nested objects and array items lack enfor...

EEF-CVE-2026-88257 beam_mcp: nested tool argument constraints advertised but not enforced

Summary Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beammcp allows an MCP client to reach a tool's dispatch function with arguments that violate the input schema the server advertised. BeamMCP.Schema.validate/2 checked type, required, additionalProperties, enum and...

EUVD-2026-94980

Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beammcp allows an MCP client to reach a tool's dispatch function with arguments that violate the input schema the server advertised. BeamMCP.Schema.validate/2 checked type, required, additionalProperties, enum and numeric...

CVE-2026-88257 beam_mcp: nested tool argument constraints advertised but not enforced

Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beammcp allows an MCP client to reach a tool's dispatch function with arguments that violate the input schema the server advertised. BeamMCP.Schema.validate/2 checked type, required, additionalProperties, enum and numeric...

CVE-2026-27420

The Katie Seaborn Zotpress WordPress plugin (versions n/a through 7.4.4 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw due to Improper Neutralization of Input During Web Page Generation . This vulnerability allows an attacker to execute malicious scripts in the context of a user's br...

EUVD-2026-94968

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Katie Seaborn Zotpress zotpress allows Stored XSS.This issue affects Zotpress: from n/a through 7.4.4...

CVE-2026-16178

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper input validation...

CVE-2015-1427

CVE-2015-1427 参数 -u 单个url -l 指定url文件 -c 指定命令...

CVE-2021-21234

CVE-2021-21234 CVE-2021-21234 Spring Boot 目录遍历 spring-boot-actuator-logview 在一个库中添加了一个简单的日志文件查看器作为 spring boot 执行器端点。它是 maven 包“eu.hinsch:spring-boot-actuator-logview”。在 0.2.13 版本之前的 spring-boot-actuator-logview 中存在目录遍历漏洞。该库的本质是通过 admin（spring boot 执行器）HTTP...

CVE-2026-16178

The IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 are vulnerable to a denial of service attack. This is caused by improper input validation which can lead to an out-of-bounds write (CWE-787). A remote at...

EUVD-2026-94889

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper input validation...

CVE-2026-16178 IBM DataPower Gateway Out-of-bounds Write

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper input validation...

CVE-2026-105079 WordPress MasterStudy LMS plugin <= 3.7.52 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in StylemixThemes MasterStudy LMS masterstudy-lms-learning-management-system allows Stored XSS.This issue affects MasterStudy LMS: from n/a through 3.7.52...