365122 matches found
CVE-2026-94051
CVE-2026-94051 affects the cowork_bench project (GitHub user 0717376), specifically the ControlFlowNode function in local_servers/pdf-tools-mcp/pdf_tools_mcp/server.py (component pdf-tools-mcp ). The root cause is an unsanitized pdf_file_path argument that enables server-side request forgery (SSR...
CVE-2026-94051 0717376 cowork_bench pdf-tools-mcp server.py ControlFlowNode server-side request forgery
A vulnerability was found in 0717376 coworkbench up to d943e75bc0fc8e3b27141979300cd8cbcd1e890d. Affected by this vulnerability is the function ControlFlowNode of the file localservers/pdf-tools-mcp/pdftoolsmcp/server.py of the component pdf-tools-mcp. Performing a manipulation of the argument...
EUVD-2026-83787
A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the function routerd.wificfgget/routerd.getrandkey of the component ubus JSON-RPC interface. Such manipulation leads to information disclosure. The attack must be carried out from within the local network...
CVE-2026-94050
An information disclosure vulnerability affects the ubus JSON-RPC interface of the D-Link DIR-X1860Z wireless router (firmware up to 1.0.2.220120.165402). The vulnerable functions are routerd.wificfg_get and routerd.get_rand_key , where manipulation allows an attacker on the local network to retr...
CVE-2026-94050 D-Link DIR-X1860Z ubus JSON-RPC interface routerd.get_rand_key information disclosure
A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the function routerd.wificfgget/routerd.getrandkey of the component ubus JSON-RPC interface. Such manipulation leads to information disclosure. The attack must be carried out from within the local network...
CVE-2024-24919
Check Point Security Gateway RCEエクスプロイトツール CVE-2024-24919 概要 このリポジトリには、Check Point Security GatewayのCVE-2024-24919 脆弱性を悪用するためのツールが含まれています。このツールは、脆弱なデバイスを識別できるマルチスキャナーと、影響を受けるデバイスを完全に制御できる単一ターゲットエクスプロイトです。 CVE-2024-24919 は、攻撃者がCheck Point Security...
CVE-2026-94045
A security flaw has been discovered in newbee-ltd newbee-mall up to 1.0.0. Impacted is an unknown function of the file controller/common/UploadController.java of the component Goods Save Endpoint. Performing a manipulation of the argument goodsName results in cross site scripting. The attack may ...
CVE-2026-94046
A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is the function getfilesnippet of the file getFileSnippet.ts of the component MCP Tool. Executing a manipulation of the argument projectRootPath/filePath can lead to path traversal. The attack may be...
CVE-2026-94043
A vulnerability was determined in Free5GC up to 4.2.3. This vulnerability affects unknown code of the file /corefuzzerdeps/free5gc/NFs/amf/internal/gmm/handler.go of the component Gmm Handler. This manipulation causes race condition. The attack can be initiated remotely. Patch name:...
CVE-2026-94047
samanhappy MCPHub (up to version 1.0.32) is affected by an improper privilege management flaw in the Template Import Endpoint , specifically the importTemplate function within src/services/templateService.ts. The vulnerability is remotely exploitable over the network with low complexity and low p...
CVE-2026-94047 samanhappy MCPHub Template Import Endpoint templateService.ts importTemplate privileges management
A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function importTemplate of the file src/services/templateService.ts of the component Template Import Endpoint. The manipulation leads to improper privilege management. Remote exploitation of...
CVE-2026-94047 samanhappy MCPHub Template Import Endpoint templateService.ts importTemplate privileges management
A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function importTemplate of the file src/services/templateService.ts of the component Template Import Endpoint. The manipulation leads to improper privilege management. Remote exploitation of...
EUVD-2026-83781
A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function importTemplate of the file src/services/templateService.ts of the component Template Import Endpoint. The manipulation leads to improper privilege management. Remote exploitation of...
Exploit for CVE-2026-88854
CVE-2026-88854 — OrdaSoft Joomla Gallery SQL Injection Python...
CVE-2026-94046
ACE-MCP (version up to 4.10.8) contains a path traversal vulnerability in the get_file_snippet function of getFileSnippet.ts within its MCP Tool component. The root cause is that isPathInsideProjectRoot only validates that filePath does not escape the projectRootPath, but projectRootPath itself i...
CVE-2026-94046 0215AndrewFeng ACE-MCP MCP Tool getFileSnippet.ts get_file_snippet path traversal
A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is the function getfilesnippet of the file getFileSnippet.ts of the component MCP Tool. Executing a manipulation of the argument projectRootPath/filePath can lead to path traversal. The attack may be...
EUVD-2026-83780
A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is the function getfilesnippet of the file getFileSnippet.ts of the component MCP Tool. Executing a manipulation of the argument projectRootPath/filePath can lead to path traversal. The attack may be...
CVE-2026-94046 0215AndrewFeng ACE-MCP MCP Tool getFileSnippet.ts get_file_snippet path traversal
A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is the function getfilesnippet of the file getFileSnippet.ts of the component MCP Tool. Executing a manipulation of the argument projectRootPath/filePath can lead to path traversal. The attack may be...
CVE-2026-94046 0215AndrewFeng ACE-MCP MCP Tool getFileSnippet.ts get_file_snippet path traversal
A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is the function getfilesnippet of the file getFileSnippet.ts of the component MCP Tool. Executing a manipulation of the argument projectRootPath/filePath can lead to path traversal. The attack may be...