faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools
### Summary `faf-mcp` MCP tools accept a caller-controlled `path` argument and resolve it (`~` expansion + `path.resolve
#severity:high
共收录 5381 条相关情报。
← 返回所有主题grok-faf-mcp has an arbitrary local file read via unconfined `path` argument in FAF tools
### Summary Several `grok-faf-mcp` MCP tools accept a caller-controlled `path` argument and resolve it (`~` expansion +
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy...
CVE-2026-75976
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy of the file /cgi-bin/wa
Cross-Site Request Forgery (CSRF) vulnerability in DevItems HashBar – WordPress Notification Bar...
CVE-2026-66602
Cross-Site Request Forgery (CSRF) vulnerability in DevItems HashBar – WordPress Notification Bar allows Cross Site Reque
This High severity BASM (Broken Authentication & Session Management) vulnerability known as CVE...
CVE-2026-21582
This High severity BASM (Broken Authentication & Session Management) vulnerability known as CVE-2026-21582 was introduce
This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0...
CVE-2026-21584
This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.
Tapo C200 v5 contains an improper authentication vulnerability within the login authentication...
CVE-2026-15315
Tapo C200 v5 contains an improper authentication vulnerability within the login authentication verification module. An a
An improper input validation vulnerability in the configuration service for processing encrypted...
CVE-2026-15316
An improper input validation vulnerability in the configuration service for processing encrypted credential data has bee
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...
CVE-2026-73939
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...
CVE-2026-73936
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...
CVE-2026-73938
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...
CVE-2026-73934
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...
CVE-2026-73937
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...
CVE-2026-73933
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...
CVE-2026-73935
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...
CVE-2026-73928
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...
CVE-2026-73927
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...
CVE-2026-73925
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...
CVE-2026-73929
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...
CVE-2026-73931
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver