NVD CVEs — 本日公開 (6 件)
CVE-2026-7445 6.3 MEDIUM
A security vulnerability has been detected in ZachHandley ZMCPTools up to 0.2.2. Affected by this issue is some unknown functionality of the file src/managers/ResourceManager.ts of the component MCP Log Resource Handler. The manipulation of the argument dirname leads to path traversal. Remote exploi
CVE-2026-7446 7.3 HIGH
A vulnerability was detected in VetCoders mcp-server-semgrep 1.0.0. This affects the function analyze_results/filter_results/export_results/compare_results/scan_directory/create_rule of the file src/index.ts of the component MCP Interface. The manipulation of the argument ID results in os command in
CVE-2026-7447 6.3 MEDIUM
A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/update_customer.php. This manipulation of the argument type/length/business parameter validity causes sql injection. The attack is possible to be carried out remot
CVE-2026-7468 7.3 HIGH
A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affects an unknown function of the file /smart-admin-api/druid/index.html of the component Demo Site. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been d
CVE-2026-7469 6.3 MEDIUM
A vulnerability was detected in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. This impacts the function sub_425A28 of the file /goform/DelFil. The manipulation of the argument delflag results in command injection. The attack may be launched remotely. The exploit is now public and may be used.
CVE-2026-7470 8.8 HIGH
A flaw has been found in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. Affected is the function sub_427C3C of the file /goform/SafeMacFilter. This manipulation of the argument page causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and m
GitHub Security Advisories — 本日公開 (16 件)
GHSA-jc4x-cmh7-8379
HIGH
A flaw has been found in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. Affected is the function...
GHSA-g5fj-9fvp-2rvq
LOW
A vulnerability was detected in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. This impacts the...
GHSA-4x6g-gfxr-j6rp
LOW
A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability...
GHSA-m623-j3j4-q8vr
MEDIUM
A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affects an...
GHSA-86hp-qxqp-w9wv
MEDIUM
A vulnerability was detected in VetCoders mcp-server-semgrep 1.0.0. This affects the function...
GHSA-6xqm-jw5j-72jf
LOW
A security vulnerability has been detected in ZachHandley ZMCPTools up to 0.2.2. Affected by this...
GHSA-m7hc-392f-p2fg
MEDIUM
A weakness has been identified in BurtTheCoder mcp-dnstwist up to 1.0.4. Affected by this...
GHSA-3h4p-c4mx-3p28
HIGH
A vulnerability was identified in UTT HiPER 1250GW up to 3.2.7-210907-180535. This issue affects...
GHSA-j63v-gc5m-5wgg
HIGH
A security flaw has been discovered in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is...
GHSA-jxhx-v8wh-chm3
HIGH
A vulnerability was determined in UTT HiPER 1250GW up to 3.2.7-210907-180535. This vulnerability...