Aggregator

CVE-2026-5023 | DeDeveloper23 codebase-mcp up to 3ec749d237dd8eabbeef48657cf917275792fde6 RepoMix Command src/tools/codebase.ts getCodebase/getRemoteCodebase/saveCodebase os command injection

VulDB Recent Entries
1 week 3 days ago
A vulnerability classified as critical was found in DeDeveloper23 codebase-mcp up to 3ec749d237dd8eabbeef48657cf917275792fde6. This vulnerability affects the function getCodebase/getRemoteCodebase/saveCodebase of the file src/tools/codebase.ts of the component RepoMix Command Handler. Such manipulation leads to os command injection. This vulnerability is documented as CVE-2026-5023. The attack needs to be performed locally. Additionally, an exploit exists. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.
vuldb.com

CVE-2026-5021 | Tenda F453 1.0.0.3 httpd /goform/PPTPUserSetting fromPPTPUserSetting delno stack-based overflow

VulDB Recent Entries
1 week 3 days ago
A vulnerability classified as critical has been found in Tenda F453 1.0.0.3. This affects the function fromPPTPUserSetting of the file /goform/PPTPUserSetting of the component httpd. This manipulation of the argument delno causes stack-based buffer overflow. This vulnerability is registered as CVE-2026-5021. Remote exploitation of the attack is possible. Furthermore, an exploit is available.
vuldb.com

Managed ad