CVE-2026-55582 mcp-shell: Secure Mode Allowlist Bypass via Git Shell Alias

mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, the default security.yaml allows /usr/bin/git, while security.go omits ! from containsShellMetacharacters and containsDangerousShellConstructs and applies no per-executable argument policy. A...

CVE-2020-12787

Microchip Atmel ATSAMA5 products in Secure Mode allow an attacker to bypass existing security mechanisms related to applet handling...

UBUNTU-CVE-2014-8350

Smarty before 3.1.21 allows remote attackers to bypass the secure mode restrictions and execute arbitrary PHP code as demonstrated by "literal" in a template...

CVE-2014-8350

Smarty before 3.1.21 allows remote attackers to bypass the secure mode restrictions and execute arbitrary PHP code as demonstrated by "literal" in a template...

CVE-2014-8350: Improper Control of Generation of Code

Smarty before 3.1.21 allows remote attackers to bypass the secure mode restrictions and execute arbitrary PHP code as demonstrated by "literal" in a template...

PT-2014-8482

Name of the Vulnerable Software and Affected Versions Smarty versions prior to 3.1.21 Description The issue allows remote attackers to bypass secure mode restrictions and execute arbitrary PHP code. This can be achieved by inserting malicious code into a template, such as literal. Recommendations...