hieuPenguinnn

Odoo MCP 1.0.0 through 1.3.2 Information Disclosure via execute_method Tool

UnicomAI Wanwu through 0.6.5 Authorization Bypass via /v1/appspace/app/key AppKey Minting

phpMyFAQ through 4.1.10 Missing Authorization via MCP Server faq_search Tool

CoreShop through 2026.2.2 Missing Authorization via ResourceController listAction

CoreShop through 1.5.5 Authorization Bypass via OrderController OrderConfirm and SendReship

iFlytek Astron Agent through 1.1.2 Authorization Bypass via /workflow/v1/resume Endpoint

mcp-go through 1.2.1 Denial of Service via Unbounded POST Body Buffering

Wanwu before 0.6.3 IDOR AppKey Deletion via DELETE /v1/appspace/app/key

thClaws through 0.141.0 Symlink Following File Write via POST /v1/inputs