CVE Vulnerability Catalog

A vulnerability was detected in crazyrabbitLTC mcp-code-review-server up to 0.1.0 in the executeRepomix function of src/repomix.ts (RepoMix Command Handler component). Manipulation results in command injection, remotely exploitable. The exploit is public, and the project has not reacted.

A path traversal vulnerability has been detected in 8nite metatrader-4-mcp version 1.0.0. The vulnerability affects the CallToolRequestSchema function in src/index.ts within the sync_ea_from_file component, where manipulation of the ea_name argument leads to path traversal. The attack can be launched remotely, and a public exploit is already available.

A vulnerability was determined in itsourcecode Courier Management System 1.0 in an unknown function of the file /edit_user.php. Manipulation of the argument ID can lead to SQL injection, and the attack may be performed remotely. The exploit has been publicly disclosed and may be utilized.

A flaw was found in TRENDnet TEW-821DAP up to 1.12B01 in the tools_diagnostic function of /tmp/diagnostic (Firmware Update component). Manipulation causes OS command injection, remotely exploitable. The exploit is public; the product was EOL 8 years ago and is unsupported.

The Total theme for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in versions up to, and including, 2.2.1 due to insufficient output escaping when rendering the_title() inside HTML attribute context in the home blog section template. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires the malicious post to be published and displayed with a featured image in the Home Page blog section.

A vulnerability was detected in TRENDnet TEW-821DAP up to version 1.12B01 in the tools_diagnostic function, allowing OS command injection. The exploit is publicly available and may be used. The vendor states the product was EOL 8 years ago and is no longer supported.

W jądrze Linuxa zidentyfikowano podatność związaną z funkcjami vidtv_ts_null_write_into() oraz vidtv_ts_pcr_write_into(), które przyjmują argumenty jako struktury przekazywane przez wartość. To powoduje ostrzeżenia MSAN dotyczące niezainicjowanych wartości.

The Ona theme for WordPress in versions up to and including 1.26 is vulnerable to Server-Side Request Forgery via ona_activate_child_theme. Authenticated attackers with administrator-level access can make requests to arbitrary locations and query or modify information from internal services.

The Widgets for Social Photo Feed plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the '/trustindex_feed_hook_instagram/troubleshooting' and '/trustindex_feed_hook_instagram/submit-data' REST API endpoints in all versions up to, and including, 1.8. This makes it possible for unauthenticated attackers to access and update plugin settings.

A flaw was found in ArtMin96 yii2-mcp-server 1.0.2 affecting the MCP Interface (src/index.ts, functions yii_command_help/yii_execute_command). Input manipulation leads to OS command injection, and the attack can be executed remotely. The exploit has been published and the project has not responded to the issue report.

In Dayoooun hwpx-mcp 0.2.0, the save_document/export_to_text/export_to_html functions in mcp-server/src/index.ts (MCP Interface component) allow path traversal via manipulation of the output_path argument. The exploit is public and remote exploitation is possible.

In mem0ai mem0 up to version 1.0.11, the pickle.load/pickle.dump function in mem0/vector_stores/faiss.py allows unsafe deserialization. The exploit has been made public and can be used remotely.

In nextlevelbuilder ui-ux-pro-max-skill up to 2.5.0, the data.get function in generate-slide.py of the Slide Generator component leads to cross-site scripting. The attack can be performed remotely and the exploit has been publicly disclosed. The project was informed but has not reacted.

A vulnerability was detected in ui-ux-pro-max-skill up to 2.5.0 in the _format_plugins function of tailwind_config_gen.py (Tailwind Config Generator). Manipulation causes code injection. The attack can be carried out remotely and the exploit is publicly available.

mtrudel bandit (from 0.3.6 before 1.11.0) has an Allocation of Resources Without Limits or Throttling vulnerability. deserialize/2 checks SETTINGS_MAX_FRAME_SIZE only after buffering the entire HTTP/2 frame body, allowing an unauthenticated attacker to exhaust memory with oversized frames.

mtrudel bandit (from 1.0.0 before 1.11.0) has a Reliance on Untrusted Inputs in a Security Decision vulnerability. determine_scheme/2 returns the client-supplied URI scheme verbatim, ignoring the transport's secure? flag, allowing unauthenticated transport-state spoofing on plaintext HTTP connections.

A vulnerability in the Bandit library (Elixir) allows HTTP request smuggling via duplicate Content-Length headers. The server accepts the first header and treats the remaining data as a subsequent request on the same connection.

A security flaw was discovered in TimBroddin astro-mcp-server up to 1.1.1 in an unknown function of src/index.ts within the MCP Tool Query Construction component. Manipulating the request.params.arguments argument results in SQL injection. The attack may be initiated remotely and the exploit is publicly available.

A vulnerability was determined in ghantakiran splunk-mcp-integration up to commit 0b86b09d5e5adf0433acd43c975951224613a1a6. The create_csv_export function in services/csv-export-service/app/api/v1/endpoints/csv_export.py (CSV Export component) allows path traversal via manipulation of the job_name argument. The attack can be initiated remotely and the exploit has been publicly disclosed.

A vulnerability was found in ggerve coding-standards-mcp affecting the get_style_guide/get_best_practices functions (server.py). Manipulation of the Language argument results in path traversal, and the attack can be launched remotely. The exploit has been made public and the project has not responded; due to rolling releases, version details are not available.