Lucene search
+L

11 matches found

Kitploit
Kitploit
•added 2026/10/16 10:23 a.m.•20 views

CVE-2026-18953

CVE-2026-18953 — PoC Arbitrary file write in awslabs.aws-transform-mcp-server AWS Transform MCP server via the savePath parameter of the getresource tool. | ---|--- CVE| CVE-2026-18953 CWE| CWE-22 — Improper Limitation of a Pathname to a Restricted Directory Affected|...

8.8CVSS6.1AI score0.00183EPSS
SaveExploits1References3
Kitploit
Kitploit
•added 2026/10/15 7:41 a.m.•16 views

rtty_CVE-2025-56708-CVE-2025-56709

CVE-2025-56708&CVE-2025-56709 【CVE-2025-56709】savepath Buffer Overflow Vulnerability Overview In rtty totalsize = ctx-remainsize = bufferpullu32beinfo; ment = findmountpointsavepath; if ment uint64t avail; if !strcmpment-mnttype, "ramfs" struct sysinfo si; if sysinfo&si logerr"download file fail:...

6.4AI score
SaveExploits1References2
NVD
NVD
•added 2026/08/05 8:17 p.m.•29 views

CVE-2026-18953

Improper limitation of a pathname to a restricted directory in the getresource tool in Amazon awslabs.aws-transform-mcp-server 0.1.0 through 0.1.4 might allow a context-dependent actor to write arbitrary files outside the intended working directory via the savePath parameter. To remediate this...

8.8CVSS0.00183EPSS
SaveExploits1References3
CVE
CVE
•added 2026/08/05 7:33 p.m.•83 views

CVE-2026-18953

CVE-2026-18953 affects the Amazon awslabs.aws-transform-mcp-server package (versions 0.1.0–0.1.4). The issue is an improper limitation of a pathname to a restricted directory in the get_resource tool, which could allow a context-dependent actor to write arbitrary files outside the intended workin...

8.8CVSS6.1AI score0.00183EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/05 12:00 a.m.•12 views

CVE-2026-18953: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory in the getresource tool in Amazon awslabs.aws-transform-mcp-server 0.1.0 through 0.1.4 might allow a context-dependent actor to write arbitrary files outside the intended working directory via the savePath parameter. To remediate this...

8.8CVSS6.1AI score0.00183EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2026/08/05 12:00 a.m.•10 views

PT-2026-68306

Name of the Vulnerable Software and Affected Versions Amazon awslabs.aws-transform-mcp-server versions 0.1.0 through 0.1.4 Description Improper limitation of a pathname to a restricted directory in the get resource tool allows a context-dependent actor to write arbitrary files outside the intende...

8.8CVSS6AI score0.00183EPSS
SaveExploits1References8
GithubExploit
GithubExploit
•added 2025/09/28 12:02 p.m.•738 views

Exploit for CVE-2025-56708

CVE-2025-56708&CVE-2025-56709 【CVE-2025-56709】savepath Bu...

5.8AI score
SaveExploits1
zdt
zdt
•added 2018/09/16 12:00 a.m.•49 views

Faleemi Desktop Software 1.8.2 - SavePath for ScreenShots Buffer Overflow (SEH) Exploit

Exploit for windows platform in category local exploits Exploit Title: Faleemi Desktop Software 1.8.2 - 'SavePath for ScreenShots' Buffer Overflow SEH Author: Gionathan "John" Reale Software Link: http://support.faleemi.com/fsc776/Faleemiv1.8.exe Tested Version: 1.8.2 Tested on OS: Windows 7 32bi...

7.2AI score
SaveExploits0
exploitpack
exploitpack
•added 2018/09/07 12:00 a.m.•17 views

iSmartViewPro 1.5 - SavePath for ScreenShots Local Buffer Overflow (SEH)

iSmartViewPro 1.5 - SavePath for ScreenShots Local Buffer Overflow SEH...

3.2AI score
SaveExploits0
exploitpack
exploitpack
•added 2018/08/13 12:00 a.m.•27 views

Monitoring software iSmartViewPro 1.5 - SavePath for ScreenShots Buffer Overflow

Monitoring software iSmartViewPro 1.5 - SavePath for ScreenShots Buffer Overflow...

3.5AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2018/08/13 12:00 a.m.•35 views

iSmartViewPro 1.5 Buffer Overflow

Exploit Title: iSmartViewPro 1.5 - 'SavePath for ScreenShots' Local Buffer Overflow Author: Shubham Singh Known As: Spirited Wolf Twitter: @Pwsecspirit Discovey Date: 2018-08-12 Software Link: https://securimport.com/university/videovigilancia-ip/software/493-software-ismartviewpro-v1-5 Tested...

0.8AI score
SaveExploits0
Rows per page
Query Builder