Lucene search
+L

12 matches found

EUVD
EUVD
added 2026/08/10 12:31 a.m.13 views

EUVD-2026-54956

A vulnerability was determined in bartekke8it56w2 new-mcp 0.1.0. This impacts the function fs.writeFileSync/fs.existsSync/fs.readFileSync of the file index.ts of the component geminithinking. This manipulation of the argument sessionCommand/sessionPath causes path traversal. The attack requires...

5.3CVSS5.6AI score0.00138EPSS
SaveExploits0References7
CVE
CVE
added 2026/08/09 10:00 p.m.48 views

CVE-2026-19370

CVE-2026-19370 affects bartekke8it56w2 new-mcp 0.1.0. The flaw resides in index.ts of the geminithinking component, impacting fs.writeFileSync, fs.existsSync, and fs.readFileSync. Manipulation of the arguments sessionCommand/sessionPath enables path traversal. The attack requires local access. Th...

5.3CVSS5.6AI score0.00138EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/01/13 10:52 p.m.12 views

CVE-2025-15500

A vulnerability was found in Sangfor Operation and Maintenance Management System up to 3.0.8. This issue affects some unknown processing of the file /isomp-protocol/protocol/getHis of the component HTTP POST Request Handler. The manipulation of the argument sessionPath results in os command...

10CVSS6.8AI score0.0569EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/01/10 12:30 a.m.14 views

EUVD-2025-206270

A vulnerability was found in Sangfor Operation and Maintenance Management System up to 3.0.8. This issue affects some unknown processing of the file /isomp-protocol/protocol/getHis of the component HTTP POST Request Handler. The manipulation of the argument sessionPath results in os command...

10CVSS6.5AI score0.0569EPSS
SaveExploits1References6
NVD
NVD
added 2026/01/09 11:15 p.m.19 views

CVE-2025-15501

A vulnerability was determined in Sangfor Operation and Maintenance Management System up to 3.0.8. Impacted is the function WriterHandle.getCmd of the file /isomp-protocol/protocol/getCmd. This manipulation of the argument sessionPath causes os command injection. Remote exploitation of the attack...

10CVSS0.06479EPSS
SaveExploits1References5
OSV
OSV
added 2026/01/09 11:15 p.m.26 views

CVE-2025-15501

A vulnerability was determined in Sangfor Operation and Maintenance Management System up to 3.0.8. Impacted is the function WriterHandle.getCmd of the file /isomp-protocol/protocol/getCmd. This manipulation of the argument sessionPath causes os command injection. Remote exploitation of the attack...

9.8CVSS5.5AI score0.06479EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2026/01/09 10:32 p.m.36 views

CVE-2025-15501 Sangfor Operation and Maintenance Management System getCmd WriterHandle.getCmd os command injection

A vulnerability was determined in Sangfor Operation and Maintenance Management System up to 3.0.8. Impacted is the function WriterHandle.getCmd of the file /isomp-protocol/protocol/getCmd. This manipulation of the argument sessionPath causes os command injection. Remote exploitation of the attack...

10CVSS0.06479EPSS
SaveExploits1References5
OSV
OSV
added 2026/01/09 10:15 p.m.19 views

CVE-2025-15500

A vulnerability was found in Sangfor Operation and Maintenance Management System up to 3.0.8. This issue affects some unknown processing of the file /isomp-protocol/protocol/getHis of the component HTTP POST Request Handler. The manipulation of the argument sessionPath results in os command...

9.8CVSS5.7AI score0.0569EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2026/01/09 9:32 p.m.45 views

CVE-2025-15500 Sangfor Operation and Maintenance Management System HTTP POST Request getHis os command injection

A vulnerability was found in Sangfor Operation and Maintenance Management System up to 3.0.8. This issue affects some unknown processing of the file /isomp-protocol/protocol/getHis of the component HTTP POST Request Handler. The manipulation of the argument sessionPath results in os command...

10CVSS0.0569EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/01/09 9:32 p.m.13 views

CVE-2025-15500 Sangfor Operation and Maintenance Management System HTTP POST Request getHis os command injection

A vulnerability was found in Sangfor Operation and Maintenance Management System up to 3.0.8. This issue affects some unknown processing of the file /isomp-protocol/protocol/getHis of the component HTTP POST Request Handler. The manipulation of the argument sessionPath results in os command...

10CVSS6.6AI score0.0569EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/01/09 12:00 a.m.25 views

PT-2026-1777

Name of the Vulnerable Software and Affected Versions Sangfor Operation and Maintenance Management System versions up to 3.0.8 Description A flaw exists in the HTTP POST Request Handler component of the software, specifically in the processing of the /isomp-protocol/protocol/getHis file...

10CVSS9.2AI score0.0569EPSS
SaveExploits1References12
CNNVD
CNNVD
added 2026/01/09 12:00 a.m.9 views

Sangfor Operation and Maintenance Management System 操作系统命令注入漏洞

Sangfor Operation and Maintenance Management System is an operation and maintenance management system from Sangfor. An OS command injection vulnerability exists in Sangfor Operation and Maintenance Management System 3.0.8 and earlier versions, which stems from incorrect manipulation of the...

10CVSS9.6AI score0.06479EPSS
SaveExploits1References5
Rows per page
Query Builder