10 matches found
CVE-2026-26015 Unauthenticated RCE in DocsGPT MCP STDIO Configuration
DocsGPT is a GPT-powered chat for documentation. From version 0.15.0 to before version 0.16.0, an attacker accessing both the official DocsGPT website or any local and public deployment, can craft a malicious payload bypassing the "MCP test" behavior to achieve arbitrary remote code execution RCE...
CVE-2026-6967 Missing Delegated Metadata Validation in awslabs/tough
Missing expiration, hash, and length enforcement in delegated metadata validation in awslabs/tough before tough-v0.22.0 allows remote authenticated users with delegated signing authority to bypass TUF specification integrity checks for delegated targets metadata and poison the local metadata cach...
CVE-2023-29995
In NanoMQ v0.15.0-0, a Heap overflow occurs in copynutf8str function of mqttparser.c...
Design/Logic Flaw
In NanoMQ v0.15.0-0, a Heap overflow occurs in copynutf8str function of mqttparser.c...
CVE-2023-29995
In NanoMQ v0.15.0-0, a Heap overflow occurs in copynutf8str function of mqttparser.c...
EMQ Technologies NanoMQ 缓冲区错误漏洞
EMQ Technologies NanoMQ is an ultra-lightweight, fast MQTT agent for the IoT edge from EMQ Technologies, USA. A security vulnerability exists in EMQ Technologies NanoMQ version v0.15.0-0 that stems from the presence of a heap overflow...
CVE-2023-29995
CVE-2023-29995 affects NanoMQ v0.15.0-0 where a heap overflow occurs in the copyn_utf8_str function of mqtt_parser.c. The entry lists a high-impact, network-based issue (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) with no confidentiality or integrity impact, but availability could be affected. The Red H...
GHSA-W8XH-93QH-35VW Unrestricted Upload of File with Dangerous Type in Payload
An arbitrary file upload vulnerability in the file upload module of PayloadCMS v0.15.0 allows attackers to execute arbitrary code via a crafted SVG file...