2057 matches found
serverless MCP Server vulnerable to Command Injection in list-projects tool
Summary A command injection vulnerability exists in the Serverless Framework's built-in MCP server package @serverless/mcp. This vulnerability only affects users of the experimental MCP server feature serverless mcp, which represents less than 0.1% of Serverless Framework users. The core Serverle...
WordPress HT Mega plugin cross-site scripting vulnerability
WordPress HT Mega plugin is an Elementor page builder plugin designed for WordPress websites. The WordPress HT Mega plugin suffers from a cross-site scripting vulnerability that stems from insufficient validation of user-supplied HTML tag name input, which can be exploited by an attacker to execu...
U.S. Dept Of Defense: Cross-Site Scripting via URL on ████████
A Cross-Site Scripting XSS vulnerability was discovered on a specific system through the GET method. The vulnerability allowed the injection of malicious scripts that could be executed. The provided payload demonstrated the vulnerability. The system host and affected products and versions were no...
CVE-2025-12489
evernote-mcp-server openBrowser Command Injection Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of evernote-mcp-server. An attacker must first obtain the ability to execute low-privileged code on the target system in...
EUVD-2012-2154
Malware in sbrugna...
EUVD-2019-10264
Malware in sbrugna...
EUVD-2018-1211
Malware in sbrugna...
EUVD-2014-1530
Malware in sbrugna...
EUVD-2017-3010
Malware in sbrugna...
EUVD-2019-15296
Malware in sbrugna...
EUVD-2021-2230
Malware in sbrugna...
EUVD-2019-10199
Malware in sbrugna...
EUVD-2018-0951
Malware in sbrugna...
EUVD-2021-21392
Malware in sbrugna...
EUVD-2019-10334
Malware in sbrugna...
EUVD-2019-2696
Malware in sbrugna...
EUVD-2019-5331
Malware in sbrugna...
EUVD-2019-5281
Malware in sbrugna...