Lucene search
+L

1336 matches found

NVD
NVD
added 2026/05/05 5:16 a.m.26 views

CVE-2026-7812

A vulnerability was found in 54yyyu code-mcp up to 4cfc4643541a110c906d93635b391bf7e357f4a8. The impacted element is the function gitoperation of the file src/codemcp/server.py of the component MCP Tool. Performing a manipulation of the argument operation results in command injection. The attack...

7.5CVSS0.01339EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/05 4:15 a.m.8 views

CVE-2026-7812

A vulnerability was found in 54yyyu code-mcp up to 4cfc4643541a110c906d93635b391bf7e357f4a8. The impacted element is the function gitoperation of the file src/codemcp/server.py of the component MCP Tool. Performing a manipulation of the argument operation results in command injection. The attack...

7.5CVSS6.8AI score0.01339EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/05/05 4:15 a.m.12 views

CVE-2026-7812 54yyyu code-mcp MCP Tool server.py git_operation command injection

A vulnerability was found in 54yyyu code-mcp up to 4cfc4643541a110c906d93635b391bf7e357f4a8. The impacted element is the function gitoperation of the file src/codemcp/server.py of the component MCP Tool. Performing a manipulation of the argument operation results in command injection. The attack...

7.5CVSS6.8AI score0.01339EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/05/05 4:0 a.m.42 views

CVE-2026-7811 54yyyu code-mcp MCP File server.py is_safe_path path traversal

A vulnerability has been found in 54yyyu code-mcp up to 4cfc4643541a110c906d93635b391bf7e357f4a8. The affected element is the function issafepath of the file src/codemcp/server.py of the component MCP File Handler. Such manipulation leads to path traversal. It is possible to launch the attack...

7.5CVSS0.00418EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/05 4:0 a.m.11 views

CVE-2026-7811

A vulnerability has been found in 54yyyu code-mcp up to 4cfc4643541a110c906d93635b391bf7e357f4a8. The affected element is the function issafepath of the file src/codemcp/server.py of the component MCP File Handler. Such manipulation leads to path traversal. It is possible to launch the attack...

7.5CVSS6.6AI score0.00418EPSS
SaveExploits0References5
CVE
CVE
added 2026/05/05 3:45 a.m.35 views

CVE-2026-7810

CVE-2026-7810 affects UsamaK98 python-notebook-mcp (server.py) with path traversal in create_notebook/read_notebook/edit_cell/add_cell. Root cause: manipulation in server.py enables remote attack. Exploit published and may be used; no product version details due to rolling-release approach. CVSS ...

7.5CVSS6.8AI score0.0041EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/05/05 12:30 a.m.13 views

EUVD-2026-27159

A security flaw has been discovered in A-G-U-P-T-A wireshark-mcp edaf604416fbc94a201b4043092d4a1b09a12275/400c3da70074f22f3cce7ccb65304cafc7089c89. This affects the function quickcapture of the file pysharkmcp.py. The manipulation results in os command injection. The attack may be launched...

7.5CVSS6.8AI score0.01312EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/05/05 12:30 a.m.20 views

EUVD-2026-27161

A security flaw has been discovered in Axle-Bucamp MCP-Docusaurus up to 404bc028e15ec304c9a045528560f4b5f27a17e0. The affected element is the function updatedocument/continuedocument/deletedocument/getcontent of the file app/routes/document.py. Performing a manipulation of the argument DOCSDIR/pa...

7.5CVSS6.8AI score0.0041EPSS
SaveExploits0References6
NVD
NVD
added 2026/05/05 12:16 a.m.18 views

CVE-2026-7788

A security flaw has been discovered in Axle-Bucamp MCP-Docusaurus up to 404bc028e15ec304c9a045528560f4b5f27a17e0. The affected element is the function updatedocument/continuedocument/deletedocument/getcontent of the file app/routes/document.py. Performing a manipulation of the argument DOCSDIR/pa...

7.5CVSS0.0041EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/05 12:0 a.m.9 views

CVE-2026-7788

A security flaw has been discovered in Axle-Bucamp MCP-Docusaurus up to 404bc028e15ec304c9a045528560f4b5f27a17e0. The affected element is the function updatedocument/continuedocument/deletedocument/getcontent of the file app/routes/document.py. Performing a manipulation of the argument DOCSDIR/pa...

7.5CVSS6.8AI score0.0041EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/05/05 12:0 a.m.14 views

PT-2026-36970

A flaw has been found in UsamaK98 python-notebook-mcp up to a05a232815809a7e425b5fa7be26e0d4369894c2. Impacted is the function create notebook/read notebook/edit cell/add cell of the file server.py. This manipulation causes path traversal. It is possible to initiate the attack remotely. The explo...

7.5CVSS6.8AI score0.0041EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/05/05 12:0 a.m.12 views

PT-2026-36972

A vulnerability has been found in 54yyyu code-mcp up to 4cfc4643541a110c906d93635b391bf7e357f4a8. The affected element is the function is safe path of the file src/code mcp/server.py of the component MCP File Handler. Such manipulation leads to path traversal. It is possible to launch the attack...

7.5CVSS6.6AI score0.00418EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/05/04 11:45 p.m.44 views

CVE-2026-7785 A-G-U-P-T-A wireshark-mcp pyshark_mcp.py quick_capture os command injection

A security flaw has been discovered in A-G-U-P-T-A wireshark-mcp edaf604416fbc94a201b4043092d4a1b09a12275/400c3da70074f22f3cce7ccb65304cafc7089c89. This affects the function quickcapture of the file pysharkmcp.py. The manipulation results in os command injection. The attack may be launched...

7.5CVSS0.01312EPSS
SaveExploits0References5
CVE
CVE
added 2026/05/04 11:45 p.m.22 views

CVE-2026-7785

CVE-2026-7785 affects A-G-U-P-T-A wireshark-mcp: the vulnerable component is the function quick_capture in pyshark_mcp.py, with an underlying issue leading to an OS command injection. The description indicates the issue can be triggered remotely and that a public exploit may exist. There are no v...

7.5CVSS6.8AI score0.01312EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/04 11:45 p.m.5 views

CVE-2026-7785

A security flaw has been discovered in A-G-U-P-T-A wireshark-mcp edaf604416fbc94a201b4043092d4a1b09a12275/400c3da70074f22f3cce7ccb65304cafc7089c89. This affects the function quickcapture of the file pysharkmcp.py. The manipulation results in os command injection. The attack may be launched...

7.5CVSS6.8AI score0.01312EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/05/04 8:21 p.m.10 views

CVE-2026-7589

A vulnerability was determined in ghantakiran splunk-mcp-integration up to 0b86b09d5e5adf0433acd43c975951224613a1a6. Impacted is the function createcsvexport of the file services/csv-export-service/app/api/v1/endpoints/csvexport.py of the component CSV Export. This manipulation of the argument...

6.9CVSS5.7AI score0.00449EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/04 12:0 a.m.15 views

PT-2026-36936

A security flaw has been discovered in A-G-U-P-T-A wireshark-mcp edaf604416fbc94a201b4043092d4a1b09a12275/400c3da70074f22f3cce7ccb65304cafc7089c89. This affects the function quick capture of the file pyshark mcp.py. The manipulation results in os command injection. The attack may be launched...

7.5CVSS5.6AI score0.01312EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/05/01 6:30 p.m.7 views

CVE-2026-7589

A vulnerability was determined in ghantakiran splunk-mcp-integration up to 0b86b09d5e5adf0433acd43c975951224613a1a6. Impacted is the function createcsvexport of the file services/csv-export-service/app/api/v1/endpoints/csvexport.py of the component CSV Export. This manipulation of the argument...

6.9CVSS5.7AI score0.00449EPSS
SaveExploits0References5
NVD
NVD
added 2026/05/01 6:16 p.m.9 views

CVE-2026-7588

A vulnerability was found in ggerve coding-standards-mcp. This issue affects the function getstyleguide/getbestpractices of the file server.py. The manipulation of the argument Language results in path traversal. It is possible to launch the attack remotely. The exploit has been made public and...

6.9CVSS0.00449EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/01 5:45 p.m.3 views

CVE-2026-7588

A vulnerability was found in ggerve coding-standards-mcp. This issue affects the function getstyleguide/getbestpractices of the file server.py. The manipulation of the argument Language results in path traversal. It is possible to launch the attack remotely. The exploit has been made public and...

6.9CVSS5.8AI score0.00449EPSS
SaveExploits0References5
Rows per page
Query Builder