7107 matches found
MCP Registry 输入验证错误漏洞
MCP Registry is an open-source MCP server store developed by Model Context Protocol. Versions 1.1.0 to 1.7.4 of MCP Registry contain a vulnerability related to input validation. This vulnerability stems from an open redirection attack conducted by TrailingSlashMiddleware. Attackers can construct...
MAL-2026-3697 Malicious code in syntaxlogger (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 ebc8a65895fc09c10b6e6bf23926076ec575582e80e084616e6779b091df947d When using the provided functionality, code silently downloads archives with executables to a location excluded from A scanning, and then executes them. The...
ECHO-F134-6EF2-2906
Bulletin has no description...
MINI-MQW4-RJ24-4PVC
Bulletin has no description...
CVE-2026-5773 wrong reuse of SMB connection
libcurl might in some circumstances reuse the wrong connection for SMBS transfers. libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid overhead. When reusing a connection a range of criteria must be met. Due to a logical error in the...
CVE-2026-21016
Incorrect privilege assignment in LocationManager prior to SMR May-2026 Release 1 allows local attackers to access sensitive information...
CVE-2026-21016
Incorrect privilege assignment in LocationManager prior to SMR May-2026 Release 1 allows local attackers to access sensitive information...
CVE-2026-21016
Incorrect privilege assignment in LocationManager prior to SMR May-2026 Release 1 allows local attackers to access sensitive information...
PT-2026-40569
Incorrect privilege assignment in LocationManager prior to SMR May-2026 Release 1 allows local attackers to access sensitive information...
Malicious code in txwrap (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 72b4db77d156fffbfdf3253cda39d73180fda419676d356fdbc217130c289549 During importing, the remote code is downloaded. It then exfiltrates cryptocurrency wallet data to a hardcoded location and places a backdoor through a new...
ECHO-DEED-A114-4949
Bulletin has no description...
MINI-R2P8-5QPG-WQM2
Bulletin has no description...
MINI-2WHJ-9M9M-5XJG
Bulletin has no description...
GHSA-3H63-FX68-X5FM omec-project amf crashes when processing malformed LocationReports
A flaw has been found in omec-project amf up to 2.1.1. This vulnerability affects unknown code of the component NGAP Message Handler. Executing a manipulation can lead to memory corruption. The attack can be launched remotely. The exploit has been published and may be used. This patch is called...
MINI-GQ35-RX9M-X369
Bulletin has no description...
MINI-CGCV-J7WG-FHR4
Bulletin has no description...
MINI-5FR9-VHF8-8J69
Bulletin has no description...
MINI-P6RG-8V8G-6JX9
Bulletin has no description...