VulDB CNA Team

modelcontextprotocol mcp-server-fetch/mcp-server-everything Fetch Tool server.py fetch_url server-side request forgery

formtools.org Form Tools AJAX Endpoint actions.php smart_fill server-side request forgery

ZongXR SuperMarket Instant Buy InstantBuyController.java startBuy missing authentication

YunaiV/zhijiantianya ruoyi-vue-pro Demo-order Payment Callback PayDemoOrderController.java updateDemoOrderPaid improper authorization

volotat Anagnorisis Media Filename PlaylistManager.js html cross site scripting

Casdoor API Endpoint authz_filter.go ApiFilter missing authentication

SciPhi-AI R2R JWT Secret hard-coded credentials

SciPhi-AI R2R Retrieval Completion API Endpoint llm.py server-side request forgery

calcom cal.diy PBAC Permission BookingAccessService.ts doesUserIdHaveAccessToBooking authorization

onetwothreeneth HospitalManagementSystem sessions.php improper authentication