Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2026/02/16 8:11 a.m.16 views

AWS VDP: Arbitrary Code Execution via Scanner Bypass in **aws-diagram-mcp-server** `exec()` Namespace

Description: The aws-diagram-mcp-server contains an arbitrary code execution vulnerability in diagramstools.py. User-supplied Python code is executed via execcode, namespace at line 305 with a namespace containing the full os module, urlretrieve, and Python builtins. A security scanner scanner.py...

6.4AI score
SaveExploits0
Rows per page
Query Builder