Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2026/04/14 10:32 p.m.18 views

MCP Server Kubernetes has an Argument Injection in port_forward tool via space-splitting

Summary The portforward tool in mcp-server-kubernetes constructs a kubectl command as a string and splits it on spaces before passing to spawn. Unlike all other tools in the codebase which correctly use execFileSync"kubectl", argsArray, portforward uses string concatenation with user-controlled...

8.3CVSS5.9AI score0.00258EPSS
SaveExploits0References4Affected Software1
Virtuozzo
Virtuozzo
added 2021/08/27 12:00 a.m.32 views

Virtuozzo Hybrid Infrastructure 4.6 Update 2

This update provides bug fixes and improvements. Vulnerability id: VSTOR-45618 Incorrect storage usage values are reported. Vulnerability id: VSTOR-45724 Some users cannot access S3 via the user panel. Vulnerability id: VSTOR-44252 Detection of slow disks works inside virtual environments...

1.4AI score
SaveExploits0
Rows per page
Query Builder