CVE-2026-81491

A flaw has been found in boxpositron with-context-mcp up to 3.0.7. This affects the function ingestnotes/teleportnotes/syncnotes/projectfolder of the file src/index.ts. Executing a manipulation can lead to path traversal. It is possible to launch the attack remotely. The exploit has been publishe...

EUVD-2026-66829

A security flaw has been discovered in ddfourtwo sentry-selfhosted-mcp 0.4.0. The affected element is an unknown function of the component rawsentryapi. The manipulation of the argument endpoint results in server-side request forgery. It is possible to launch the attack remotely. The exploit has...

CVE-2025-25617

CVE-2025-25617 Unifiedtransform v2.0 est vulnérable à un contrôle d'accès incorrect, permettant aux enseignants de créer des entrées de syllabus — un rôle destiné uniquement aux administrateurs. Vendeur : Unifiedtransform PoC Étape 1 : Connectez-vous à l'application en tant qu'enseignant. Étape 2...

CVE-2019-13633

CVE-2019-13633 Description suggérée : Blinger.io v.1.0.2519 est vulnérable aux XSS aveugles/persistantes. Informations supplémentaires : Blinger.io est une plateforme utilisée par des clients mondiaux tels que FxPro, Alfa Bank, OneTwoTrip, Ivi, KupiVIP Group, Belavia, Wargaming, Yandex, OZON, TCS...

CVE-2025-25621

CVE-2025-25621 Unifiedtransform v2.0 अनुचित पहुँच नियंत्रण Incorrect Access Control के प्रति संवेदनशील है, जो शिक्षकों को एंडपॉइंट /courses/teacher/index?teacherid=2&semesterid=1 के माध्यम से सहकर्मी शिक्षकों की उपस्थिति दर्ज करने की अनुमति देता है। विक्रेता: Unifiedtransform PoC चरण 1: एक शिक्षक...

CVE-2025-55184-POC-Expolit

🔥 CVE-2025-55184 Strumento di Sfruttamento Avanzato Framework Professionale di Sfruttamento DoS per React Server Components "IMPARA SEMPRE, HACKERA SEMPRE" - CyberTechAjju 🚀 Avvio Rapido • 📖 Documentazione • 💻 Caratteristiche • ⚠️ Avvertenza Legale 🎯 Informazioni su CVE-2025-55184 CVE-2025-55184 è...

CVE-2026-81491

A path traversal vulnerability exists in boxpositron with-context-mcp up to version 3.0.7 , affecting the functions ingest_notes, teleport_notes, sync_notes, and project_folder within src/index.ts. The flaw can be exploited remotely with no required privileges or user interaction, leading to part...

EUVD-2026-66835

A flaw has been found in boxpositron with-context-mcp up to 3.0.7. This affects the function ingestnotes/teleportnotes/syncnotes/projectfolder of the file src/index.ts. Executing a manipulation can lead to path traversal. It is possible to launch the attack remotely. The exploit has been publishe...

CVE-2026-81491 boxpositron with-context-mcp index.ts project_folder path traversal

A flaw has been found in boxpositron with-context-mcp up to 3.0.7. This affects the function ingestnotes/teleportnotes/syncnotes/projectfolder of the file src/index.ts. Executing a manipulation can lead to path traversal. It is possible to launch the attack remotely. The exploit has been publishe...

CVE-2023-47459

CVE-2023-47459 Beschreibung Eine Schwachstelle wurde in Knovos Discovery v.22.67.0 entdeckt, die es einem entfernten Angreifer ermöglicht, vertrauliche Informationen über die folgenden Komponenten abzurufen: /DiscoveryReview/Service/CaseManagement.svc/GetProductSiteName,...

CVE-2026-81421

A security flaw has been discovered in ddfourtwo sentry-selfhosted-mcp 0.4.0. The affected element is an unknown function of the component rawsentryapi. The manipulation of the argument endpoint results in server-side request forgery. It is possible to launch the attack remotely. The exploit has...

CVE-2024-40324

CVE-2024-40324 विवरण E-Staff v5.1 में एक CRLF इंजेक्शन भेद्यता हमलावरों को इनपुट फ़ील्ड में कैरिज रिटर्न CR और लाइन फीड LF अक्षर सम्मिलित करने की अनुमति देती है, जिससे HTTP प्रतिक्रिया विभाजन और हेडर हेरफेर होता है। भेद्यता प्रकार CRLF उत्पाद विक्रेता E-Staff प्रभावित उत्पाद कोड आधार E-Staff 5.1...

EUVD-2026-66832

A security vulnerability has been detected in danielpopamd linkedin-ads-mcp 1.0.0. Affected by this vulnerability is the function fs.readFileSync of the file src/tools/campaign-management.ts of the component Media Upload. Such manipulation of the argument filePath leads to path traversal. The...

CVE-2020-16270

CVE-2020-16270 Descrição sugerida : OLIMPOKS versões anteriores a 3.3.39 permite XSS em Auth/Admin ErrorMessage. Um atacante remoto pode usar a vulnerabilidade descoberta para injetar payload JavaScript malicioso nos navegadores das vítimas no contexto de aplicações vulneráveis. O código executad...

CVE-2020-24028

CVE-2020-24028 الوصف يسمح ForLogic Qualiex v1 و v3 لأي عميل مصادق بتحقيق تصعيد الامتيازات عبر إنشاء مستخدمين، أو تغيير كلمات المرور، أو تحديث أذونات المستخدم. التواريخ المهمة الإعلان للبائع: 2020-07-12 تاريخ الكشف العام: 2020-08-31 نوع الثغرة أذونات غير آمنة بائع المنتج ForLogic قاعدة كود المنتج...

EUVD-2026-66809

A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=login2. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

EUVD-2026-66769

A flaw has been found in itsourcecode Payroll System 1.0. The impacted element is the function create/read/update/delete of the file ajax.php of the component CRUD Operation Handler. Executing a manipulation of the argument action can lead to missing authentication. The attack may be performed fr...

CVE-2026-49975-POC

CVE-2026-49975 — PoC della Bomba HTTP/2 Exploit proof-of-concept per CVE-2026-49975, una vulnerabilità di denial-of-service remota nelle implementazioni del server HTTP/2. Scoperto da Quang Luong Calif Security Research, divulgato il 2 giugno 2026. Solo per test di sicurezza autorizzati. Non...

EUVD-2026-67100

An issue in EcoOnline EHS com.airsweb.v10 application for Android, version 0.2.499 allows a remote attacker to obtain sensitive information and execute arbitrary code via the AndroidManifest.xml component...

PT-2026-82803

A flaw has been found in RooCodeInc Roo-Code up to 3.51.1. This issue affects the function path.resolve of the file src/core/tools/ApplyPatchTool.ts of the component ApplyPatchTool. This manipulation causes path traversal. It is possible to initiate the attack remotely. The exploit has been...