MCP inspector 安全漏洞

MCP inspector is a development tool for debugging MCP servers. A security vulnerability exists in MCP inspector versions prior to 0.16.6 that stems from a cross-site scripting attack that could lead to arbitrary command execution...

PT-2025-36513

Name of the Vulnerable Software and Affected Versions MCP Inspector versions prior to 0.16.6 Description The MCP Inspector, a developer tool for testing and debugging MCP servers, is susceptible to a cross-site scripting issue. This issue occurs when connecting to untrusted remote MCP servers wit...

MAL-2025-42068 Malicious code in redux-saga-inspector (npm)

The package redux-saga-inspector was found to contain malicious code...

Malicious code in redux-saga-inspector (npm)

The package redux-saga-inspector was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2025-2136

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Inspector in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2017-2405

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the WebKit Web Inspector...

Linux Distros Unpatched Vulnerability : CVE-2017-7012

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected...

Linux Distros Unpatched Vulnerability : CVE-2017-2377

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the WebKit Web Inspector...

Linux Distros Unpatched Vulnerability : CVE-2017-7161

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in certain Apple products. Safari before 11.0.2 is affected. The issue involves the WebKit Web Inspector component. It allows remote...

Remote Code Execution (RCE)

@nestjs/devtools-integration is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper sandboxing and missing cross-origin protections due to unsafe execution of attacker-controlled input in a JavaScript sandbox via the /inspector/graph/interact endpoint...

Linux Distros Unpatched Vulnerability : CVE-2019-10141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in...

The vulnerability of the mcp dev tool for testing and debugging MCP servers, MCP Inspector, allows a attacker to perform a CSRF attack.

The vulnerability of the mcp dev tool for testing and debugging MCP servers, MCP Inspector, is related to the lack of authentication for the critical function. Exploiting this vulnerability allows a remote attacker to perform a CSRF attack...

Arbitrary Command Injection

Overview @nestjs/devtools-integration is a Nest - modern, fast, powerful node.js web framework @devtools-integration Affected versions of this package are vulnerable to Arbitrary Command Injection via the inspector/graph/interact endpoint, which accepts JSON input containing a code field and...

webkitgtk: Command injection in web inspector

A command injection issue existed in Web Inspector. This issue was addressed with improved escaping. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Copying a URL from Web...

webkitgtk: Copying a URL from Web Inspector may lead to command injection

A flaw was found in WebKitGTK. Copying a URL from Web Inspector may lead to command injection due to improper file handling...

MCP Inspector < 0.14.1 Remote Code Execution

According to the self-reported version number, the version of MCP Inspector hosted on the remote is affected by a Remote Code Execution vulnerability. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. This detectio...

CVE-2025-53298

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in gioni Plugin Inspector plugin-inspector allows Path Traversal.This issue affects Plugin Inspector: from n/a through = 1.5...

WordPress Plugin Inspector plugin <= 1.5 - Arbitrary File Download Vulnerability

Arbitrary File Download Vulnerability discovered by Nguyen Ngoc Quang Bach maysbachs in WordPress Plugin Plugin Inspector versions = 1.5...

CVE-2025-53298

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in gioni Plugin Inspector plugin-inspector allows Path Traversal.This issue affects Plugin Inspector: from n/a through = 1.5...

CVE-2025-53298

CVE-2025-53298 describes a path traversal/arbitrary file download vulnerability in the WordPress Plugin Inspector (gioni Plugin Inspector) affecting versions n/a through 1.5. The issue is rooted in improper limitation of a pathname to a restricted directory. Public sources in the provided documen...