CVE-2026-5621

CVE-2026-5621 affects ChrisChinchilla Vale-MCP up to version 0.1.0. The vulnerability targets the HTTP Interface, specifically the file src/index.ts, where manipulation of the argument config_path enables an OS command injection. An attacker must be local to exploit it. The exploit is public, and...

CVE-2026-5621

A vulnerability was found in ChrisChinchilla Vale-MCP up to 0.1.0. Affected by this vulnerability is an unknown functionality of the file src/index.ts of the component HTTP Interface. The manipulation of the argument configpath results in os command injection. Attacking locally is a requirement...

CVE-2026-5621 ChrisChinchilla Vale-MCP HTTP index.ts os command injection

A vulnerability was found in ChrisChinchilla Vale-MCP up to 0.1.0. Affected by this vulnerability is an unknown functionality of the file src/index.ts of the component HTTP Interface. The manipulation of the argument configpath results in os command injection. Attacking locally is a requirement...

PT-2026-30564

Name of the Vulnerable Software and Affected Versions ChrisChinchilla Vale-MCP versions up to 0.1.0 Description A vulnerability exists in ChrisChinchilla Vale-MCP up to version 0.1.0, specifically within the file src/index.ts of the HTTP Interface component. The manipulation of the config path...

Vale MCP Server 操作系统命令注入漏洞

The Vale MCP Server is an AI assistant protocol server with integrated syntax checking capabilities, developed by Chris Chinchilla. Versions of the Vale MCP Server prior to 0.1.0 contained a vulnerability related to operating system command injection. This vulnerability stemmed from improper...

CVE-2026-33320 vulnerabilities

Vulnerabilities for packages: vale...

CVE-2026-33320 vulnerabilities

Vulnerabilities for packages: vale...

GHSA-4FCP-JXH7-23X8 vulnerabilities

Vulnerabilities for packages: vale...

GHSA-4FCP-JXH7-23X8 vulnerabilities

Vulnerabilities for packages: vale...

Malicious code in orchid-vale-mwv292-project (npm)

The package orchid-vale-mwv292-project was found to contain malicious code...

MAL-2025-28482 Malicious code in orchid-vale-mwv292-project (npm)

The package orchid-vale-mwv292-project was found to contain malicious code...

valefurnishers.co.uk Cross Site Scripting vulnerability OBB-3949072

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

valeautosale.com Cross Site Scripting vulnerability OBB-2592500

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

vale-pisao-5818.empreendimentos.com.pt XSS vulnerability

Open Bug Bounty ID: OBB-629030 Description| Value ---|--- Affected Website:| vale-pisao-5818.empreendimentos.com.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

Threat Outbreak Alert RuleID17265: Email Messages Distributing Malicious Software on August 10, 2015

Medium Alert ID: 40385 First Published: 2015 August 10 14:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17265 may contain the following files: Name |...