A flaw has been found in boxpositron with-context-mcp up to 3.0.7. This affects the function...
CVE-2026-81491
A flaw has been found in boxpositron with-context-mcp up to 3.0.7. This affects the function ingest_notes/teleport_notes
#cwe-22
共收录 2700 条相关情报。
← 返回所有主题Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/**" mapping that results in view rendering, and where the view name is ...
CVE-2026-47884
Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/**" mapping th
A flaw has been found in boxpositron with-context-mcp up to 3.0.7. This affects the function ingest_notes/teleport_notes/sync_notes/project_folder of the file src/index.ts. Exec...
CVE-2026-81491
A flaw has been found in boxpositron with-context-mcp up to 3.0.7. This affects the function ingest_notes/teleport_notes
A vulnerability was detected in bsmi021 mcp-file-context-server 1.0.0. Affected by this issue is the function read_context of the file src/index.ts of the component Path Resolut...
CVE-2026-81486
A vulnerability was detected in bsmi021 mcp-file-context-server 1.0.0. Affected by this issue is the function read_conte
A security vulnerability has been detected in danielpopamd linkedin-ads-mcp 1.0.0. Affected by this vulnerability is the function fs.readFileSync of the file src/tools/campaign-...
CVE-2026-81485
A security vulnerability has been detected in danielpopamd linkedin-ads-mcp 1.0.0. Affected by this vulnerability is the
An attacker who can set the file_name header on a message reaching a ZipTransformer with ZipResultType.FILE (the default) can cause the resulting .zip archive to be written to a...
CVE-2026-47862
An attacker who can set the file_name header on a message reaching a ZipTransformer with ZipResultType.FILE (the default
asyncssh has SCP Path Traversal to Arbitrary File Write
CVE-2026-54591
| | | |---|---| | Product | asyncssh (all versions through 2.23.0) | | Related | CVE-2019-6111 (same class in OpenSSH) |
asyncssh has an incomplete fix for CVE-2026-45309 — AuthorizedKeysFile %u still escapes the intended directory via a leading ~ (and weakly via ${ENV}) username substitution
CVE-2026-54590
**Incomplete fix for CVE-2026-45309 (GHSA-g794-3fmp-753h).** The 2.23.0 guard that sanitises the SSH username before `
IzPack has Path Traversal in UnpackerBase that allows writing files outside the installation directory via malicious pack entries
CVE-2026-54550
### Summary IzPack's `UnpackerBase.unpack()` resolves pack-file target paths without any canonical-path or directory-co
The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.3 does not sanitize a user-supplied image reference before using it as the ...
CVE-2026-77757
CVE-2026-77757 是影响 WordPress 插件 Directorist（AI 驱动的商业目录、列表和分类广告）的一个文件操作漏洞。该插件在 8.9.3 版本之前，对用户提供的图像引用缺乏充分的输入清理。具体而言，当插件使用用
The AI Engine WordPress plugin before 3.7.2 does not confine a caller-supplied URL when mapping it to a local filesystem path before reading the file and forwarding its content...
CVE-2026-75797
CVE-2026-75797 影响 AI Engine WordPress 插件 3.7.2 之前的版本。该漏洞源于插件在将调用者提供的 URL 映射到本地文件系统路径并读取文件内容后转发至外部服务时，未对 URL 进行有效的路径约束，导致
Velero is an open source tool for backing up, restoring, and migrating Kubernetes cluster resources and persistent volumes. Prior to 1.18.1, an attacker who compromises the back...
CVE-2026-32637
Velero is an open source tool for backing up, restoring, and migrating Kubernetes cluster resources and persistent volum
DB-GPT builds the destination path for an uploaded skill from the multipart filename without...
CVE-2026-80104
DB-GPT builds the destination path for an uploaded skill from the multipart filename without constraining it to the uplo
DB-GPT builds the destination path for an uploaded skill from the multipart filename without constraining it to the upload directory. skill_upload in packages/dbgpt-app/src/dbgp...
CVE-2026-80104
DB-GPT builds the destination path for an uploaded skill from the multipart filename without constraining it to the uplo
NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7 REST network policy. A successful exploit of this vulnera...
CVE-2026-65092
NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7
Whistle vulnerable to path traversal
CVE-2026-55629
This bug was found by nova, which is an automated tool from group of Song Wu, intern, Zhejiang University; BoWang, indep
Trivy has a path traversal via a crafted vulnerability database or other downloaded artifacts
CVE-2026-55092
## Summary When Trivy downloads an OCI artifact, it uses the `org.opencontainers.image.title` annotation from the artif
phpMyFAQ has Potential Authenticated Path Traversal in PDF Export
## Summary There is an authenticated path traversal condition in the PDF export functionality, specifically within the
browse-mcp is a Playwright-based headless-browser MCP server for MCP-capable agents. Prior to 0.8.2, browser_download writes a fetched response body to join(save_dir, filename) ...
CVE-2026-55557
browse-mcp is a Playwright-based headless-browser MCP server for MCP-capable agents. Prior to 0.8.2, browser_download wr
browse-mcp has an arbitrary file write via unconfined download and state paths
CVE-2026-55557
### Impact `browser_download` wrote a fetched file to `join(save_dir, filename)` with no validation of `save_dir`, and `