CVE-2026-105139

Obot 0.26.0 before 0.26.2 contains an authorization bypass vulnerability that allows authenticated users matching any vMCP profile to reach prompts and resources of ungranted components. Because profiles were enforced only on tools, attackers can access prompts, resources, and resource templates...

CVE-2026-105139 Obot 0.26.0 before 0.26.2 Authorization Bypass via vMCP Profile Prompts and Resources

Obot 0.26.0 before 0.26.2 contains an authorization bypass vulnerability that allows authenticated users matching any vMCP profile to reach prompts and resources of ungranted components. Because profiles were enforced only on tools, attackers can access prompts, resources, and resource templates...

EUVD-2026-94310

Obot 0.26.0 before 0.26.2 contains an authorization bypass vulnerability that allows authenticated users matching any vMCP profile to reach prompts and resources of ungranted components. Because profiles were enforced only on tools, attackers can access prompts, resources, and resource templates...

CVE-2026-105139

The Obot platform (versions 0.26.0 before 0.26.2 ) contains an authorization bypass vulnerability. The root cause is that vMCP profiles were only enforced on tools, failing to restrict access to other elements. This allows authenticated users matching any vMCP profile to access prompts , resource...

MAL-2024-10958 Malicious code in cs-shared-component-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b7b8d8fe1019a5e94c13232a7501bb7dc77b9f34c4b2c02354edfc3ab84d27f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in cs-shared-component-tools

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in cs-shared-component-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b7b8d8fe1019a5e94c13232a7501bb7dc77b9f34c4b2c02354edfc3ab84d27f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

[SECURITY] Fedora 40 Update: maven-filtering-3.3.1-6.fc40

These Plexus components have been built from the filtering process/code in Maven Resources Plugin. The goal is to provide a shared component for all plugins that needs to filter resources...

CVE-2023-36321

Connected Vehicle Systems Alliance COVESA up to v2.18.8 was discovered to contain a buffer overflow via the component /shared/dltcommon.c...

CVE-2023-36321

Connected Vehicle Systems Alliance COVESA up to v2.18.8 was discovered to contain a buffer overflow via the component /shared/dltcommon.c...

Security Bulletin: A security vulnerability has been identified in an IBM Tivoli Monitoring shared component shipped with IBM Tivoli Composite Application Manager for J2EE (CVE-2014-0411).

Summary An IBM Tivoli Monitoring shared component is included as part of IBM Tivoli Composite Application Manager for J2EE. Information about a security vulnerability affecting an IBM Tivoli Monitoring shared component has been published in a security bulletin. Vulnerability Details Please consul...

Security Bulletin: A security vulnerability has been identified in an IBM Tivoli Monitoring shared component shipped with Agent for NetApp Storage (CVE-2015-4000)

Summary An IBM Tivoli Monitoring shared component is included as part of Agent for NetApp Storage. Information about a security vulnerability affecting an IBM Tivoli Monitoring shared component has been published in a security bulletin. Vulnerability Details Please consult the security bulletin f...

Microsoft Office Shared Component ASLR Bypass (MS15-013; CVE-2014-6362)

A security feature bypass vulnerability exists in Microsoft Office Shared Component. The vulnerability is due to an improper implementation of Address Space Layout Randomization ASLR by MSCOMCTL common controls library used by Microsoft Office software. A remote attacker can exploit this issue by...

Microsoft Office Shared Component Security Bypass Vulnerability (2905238)

This host is missing an important security update according to Microsoft Bulletin MS13-106. OpenVAS Vulnerability Test $Id: secpodms13-106.nasl 6086 2017-05-09 09:03:30Z teissa $ Microsoft Office Shared Component Security Bypass Vulnerability 2905238 Authors: Antu Sanadi Copyright: Copyright C 20...

Microsoft Office Shared Component Security Bypass Vulnerability (2905238)

This host is missing an important security update according to Microsoft Bulletin MS13-106. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office共享组件DLL加载任意代码执行漏洞(MS11-023)

BUGTRAQ ID: 47246 CVE ID: CVE-2011-0107 Microsoft Office是一套由微软公司开发的办公软件，它为Microsoft Windows和Apple Macintosh操作系统而开发。 Microsoft Office在实现上存在共享组件DLL加载任意代码执行，远程攻击者可利用此漏洞以当前用户权限执行任意代码。 Microsoft...