Lucene search
+L

8 matches found

OSV
OSV
•added 2026/02/08 3:15 a.m.•19 views

CVE-2026-2131

A vulnerability was identified in XixianLiang HarmonyOS-mcp-server 0.1.0. This vulnerability affects the function inputtext. The manipulation of the argument text leads to os command injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used...

8.8CVSS6.5AI score0.17473EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/02/08 2:32 a.m.•10 views

CVE-2026-2131

A vulnerability was identified in XixianLiang HarmonyOS-mcp-server 0.1.0. This vulnerability affects the function inputtext. The manipulation of the argument text leads to os command injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used...

6.5CVSS6.5AI score0.17473EPSS
SaveExploits1References4Affected Software1
EUVD
EUVD
•added 2026/02/08 2:32 a.m.•21 views

EUVD-2026-5817

A vulnerability was identified in XixianLiang HarmonyOS-mcp-server 0.1.0. This vulnerability affects the function inputtext. The manipulation of the argument text leads to os command injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used...

6.5CVSS6.5AI score0.17473EPSS
SaveExploits1References4
CVE
CVE
•added 2026/02/08 2:32 a.m.•40 views

CVE-2026-2131

CVE-2026-2131 affects XixianLiang HarmonyOS-mcp-server 0.1.0, specifically the input_text function. The vulnerability allows remote OS command injection due to manipulation of the text argument. Exploitation is described as remote with a publicly available exploit. Documented impact includes pote...

8.8CVSS6.5AI score0.17473EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/02/08 2:32 a.m.•9 views

CVE-2026-2131 XixianLiang HarmonyOS-mcp-server input_text os command injection

A vulnerability was identified in XixianLiang HarmonyOS-mcp-server 0.1.0. This vulnerability affects the function inputtext. The manipulation of the argument text leads to os command injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used...

6.5CVSS6.5AI score0.17473EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/08 12:00 a.m.•5 views

CVE-2026-2131: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was identified in XixianLiang HarmonyOS-mcp-server 0.1.0. This vulnerability affects the function inputtext. The manipulation of the argument text leads to os command injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used...

8.8CVSS6.5AI score0.17473EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/02/08 12:00 a.m.•25 views

Huawei HarmonyOS 操作系统命令注入漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS 0.1.0 version exists operating system command injection vulnerability, the vulnerability stems from the function inputtext parameter text...

8.8CVSS6.8AI score0.17473EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/04/20 12:00 a.m.•6 views

CVE-2009-4767: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in Plohni Shoutbox 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 inputname and 2 inputtext parameters. NOTE: some of these details are obtained from third party information...

4.3CVSS5.9AI score0.01465EPSS
SaveExploits2References2
Rows per page
Query Builder