MCP Toolbox for Databases: authenticated authorization bypass

An authenticated authorization bypass vulnerability exists in MCP Toolbox for Databases due to missing scope enforcement across older protocol handlers. While the 2025-11-25 protocol version handler correctly enforces per-tool restrictions defined by scopesRequired, older supported protocol...

PT-2022-27705 · Unknown · Shoplazza Lifestyle

Name of the Vulnerable Software and Affected Versions: Shoplazza LifeStyle version 1.1 Description: A problematic issue was found in the Create Product Handler component, affecting an unknown function of the file /admin/api/admin/v2 products. This issue leads to cross-site scripting and can be...

Retty App 安全漏洞

Retty Retty App is a food app from Retty Japan. Retty App suffers from a security vulnerability that stems from improper authorization in the handler allowing remote attackers to exploit the vulnerability to direct users to arbitrary websites via a vulnerable app...