Lucene search
K

5 matches found

CVE
CVE
added 2026/04/28 12:30 a.m.3 views

CVE-2026-7205

The CVE-2026-7205 entry affects duartium papers-mcp-server (version 9ceb3812a6458ba7922ca24a7406f8807bc55598). Affected is the function search_papers in src/main.py; manipulation of the topic argument leads to path traversal. Attack is described as remote (network) with a publicly available explo...

7.5CVSS7.2AI score0.00066EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/28 12:30 a.m.0 views

CVE-2026-7205

A vulnerability was identified in duartium papers-mcp-server 9ceb3812a6458ba7922ca24a7406f8807bc55598. Impacted is the function searchpapers of the file src/main.py. Such manipulation of the argument topic leads to path traversal. The attack may be launched remotely. The exploit is publicly...

7.5CVSS7.2AI score0.00066EPSS
Exploits0References5
EUVD
EUVD
added 2026/04/28 12:30 a.m.1 views

EUVD-2026-25962

A vulnerability was identified in duartium papers-mcp-server 9ceb3812a6458ba7922ca24a7406f8807bc55598. Impacted is the function searchpapers of the file src/main.py. Such manipulation of the argument topic leads to path traversal. The attack may be launched remotely. The exploit is publicly...

7.5CVSS7.2AI score0.00066EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/04/28 12:0 a.m.2 views

Papers MCP Server 路径遍历漏洞

Papers MCP Server is a scholarly paper management and MCP protocol service tool developed by Byron Duarte. There is a path traversal vulnerability in Papers MCP Server. This vulnerability stems from the incorrect handling of the topic parameter in the searchpapers function in the src/main.py file...

7.5CVSS7.1AI score0.00066EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/28 12:0 a.m.2 views

PT-2026-35574

A vulnerability was identified in duartium papers-mcp-server 9ceb3812a6458ba7922ca24a7406f8807bc55598. Impacted is the function search papers of the file src/main.py. Such manipulation of the argument topic leads to path traversal. The attack may be launched remotely. The exploit is publicly...

7.5CVSS5.2AI score0.00066EPSS
Exploits0References6
Rows per page
Query Builder