2057 matches found
serverless MCP Server vulnerable to Command Injection in list-projects tool
Summary A command injection vulnerability exists in the Serverless Framework's built-in MCP server package @serverless/mcp. This vulnerability only affects users of the experimental MCP server feature serverless mcp, which represents less than 0.1% of Serverless Framework users. The core Serverle...
WordPress HT Mega plugin cross-site scripting vulnerability
WordPress HT Mega plugin is an Elementor page builder plugin designed for WordPress websites. The WordPress HT Mega plugin suffers from a cross-site scripting vulnerability that stems from insufficient validation of user-supplied HTML tag name input, which can be exploited by an attacker to execu...
U.S. Dept Of Defense: Cross-Site Scripting via URL on ████████
A Cross-Site Scripting XSS vulnerability was discovered on a specific system through the GET method. The vulnerability allowed the injection of malicious scripts that could be executed. The provided payload demonstrated the vulnerability. The system host and affected products and versions were no...
CVE-2025-12489
evernote-mcp-server openBrowser Command Injection Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of evernote-mcp-server. An attacker must first obtain the ability to execute low-privileged code on the target system in...
EUVD-2019-4301
Malware in sbrugna...
EUVD-2020-24861
Malware in sbrugna...
EUVD-2019-5331
Malware in sbrugna...
EUVD-2020-24392
Malware in sbrugna...
EUVD-2012-3319
Malware in sbrugna...
EUVD-2020-24870
Malware in sbrugna...
EUVD-2020-7144
Malware in sbrugna...
EUVD-2018-19037
Malware in sbrugna...
EUVD-2021-17225
Malware in sbrugna...
EUVD-2019-2696
Malware in sbrugna...
EUVD-2020-7113
Malware in sbrugna...
EUVD-2014-1530
Malware in sbrugna...
EUVD-2020-24384
Malware in sbrugna...
EUVD-2020-24794
Malware in sbrugna...