Labs
Short research notes on newly disclosed vulnerabilities: the problem, the payload, and the fix.
- high
grok-faf-mcp: Arbitrary File Read via Unconfined Path in FAF Tools
The grok-faf-mcp MCP server lets any caller read files anywhere on the server's filesystem by passing an absolute path or directory-traversal sequence to several built-in tools, exposing SSH keys…
- high
faf-mcp Arbitrary File Read/Write via Unconfined Path Argument
The faf-mcp MCP server accepted caller-controlled file paths in its tools without restricting them to the project directory, letting any MCP client or prompt-injected agent read sensitive files like…
- high
claude-faf-mcp Arbitrary File Read/Write via Unconfined Path Argument
An MCP tool in claude-faf-mcp accepts a caller-supplied file path and passes it straight to the filesystem with no directory boundary, letting any MCP client or prompt-injected agent read SSH keys…
- highCVE-2026-53951
CVE-2026-53951: copier Trust-Prefix Bypass via Path Traversal Leads to Arbitrary Command Execution
Copier's template trust check can be fooled by a URL containing '..' segments, letting an attacker-controlled template run shell commands on your machine without the normal safety prompt.
- highCVE-2026-53964
CVE-2026-53964: document-merge-service Remote Code Execution via SSTI in XLSX Templates
An attacker who can upload an XLSX template can embed Jinja2 expressions that run arbitrary shell commands on the server, because the xltpl rendering engine uses an unsandboxed Jinja2 environment.
- high
GeoLens Authorization and Cache-Scope Flaws Disclose Private Dataset Data
GeoLens before 1.2.4 lets authenticated and anonymous users read private dataset metadata, tile data, and map titles they should never have access to, because several API endpoints skip re-checking…
- highCVE-2026-53957
CVE-2026-53957: @contentful/mcp-server SSRF via LLM-Controlled host/proxy Parameters
The Contentful MCP server lets an LLM supply a custom host or proxy address to the space export and import tools, causing the server to send its own Contentful management token to an…
- highCVE-2026-62673
CVE-2026-62673: Grav .htaccess File Extension Filter Case-Sensitivity Bypass
Grav's Apache rewrite rules block access to sensitive config files by extension, but missing a case flag means an attacker on a Windows, macOS, or Docker-on-Windows server can fetch those files just…
- highCVE-2026-53966
CVE-2026-53966: XWiki Platform Live Data Live Table Connector Missing Authorization Privilege Escalation
Any XWiki user with edit access to a page can call the Live Data REST API to inject or modify rights objects on that page, giving themselves script right and the ability to run arbitrary Velocity…
- highCVE-2026-53965
CVE-2026-53965: mcp/sdk HttpTransport Unbounded SSE Buffer Memory Exhaustion
The MCP PHP SDK HTTP client transport appends Server-Sent Events data to an in-memory buffer with no size limit, letting any server crash the client process by streaming bytes without ever sending…
- highCVE-2026-54347
CVE-2026-54347: Froxlor Stored XSS in DNS TXT Record Leads to Admin Account Takeover
A customer-level Froxlor user can store JavaScript in a DNS TXT record that executes in any administrator's browser, handing the attacker full control of the panel.
- highCVE-2026-54348
CVE-2026-54348: Froxlor Second-Order SQL Injection via Admins.add ipaddress Parameter
A malicious Froxlor administrator can store a SQL payload in their own account record and trigger it later to dump every admin username and password hash from the database.