Originally published in the mcp-ship-check repo, home of the free, offline scanner this post describes. Building an MCP server is nearly free now. The scarce thing is trust: with thousands of servers on the shelf, which ones are safe to plug into an agent that can read your files and run your tools? We kept a daily record of the official MCP... Weiterlesen: Shelf Watch #2: What we found auditing 194 MCP servers for code-level…
Intelligence View
⚡ tsecurity.de Intelligence
Shelf Watch #2: What we found auditing 194 MCP servers for code-level sinks
Originally published in the mcp-ship-check repo, home of the free, offline scanner this post describes. Building an MCP server is nearly free now. The scarce…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
17 Quellen
Langflow 1.8.4 Path Traversal to Remote Code Execution
16 weitere Quellen
ZZDI: Published Advisoriesvor 17 Std.ZDI-26-925: (0Day) Meta fairseq FairseqLAMB YAML File Parsing Code Injection Remote Code Execution Vulnerability ZZDI: Published Advisoriesvor 17 Std.ZDI-26-911: (0Day) Meta Detectron2 DensePose Deserialization of Untrusted Data Remote Code Execution Vulnerability ZZDI: Published Advisoriesvor 17 Std.ZDI-26-910: (0Day) Meta Detectron2 LazyConfig Deserialization of Untrusted Data Remote Code Execution Vulnerability ZZDI: Published Advisoriesvor 17 Std.ZDI-26-909: (0Day) Meta Detectron2 CfgNode.merge_from_file Deserialization of Untrusted Data Remote Code Execution Vulnerability ZZDI: Published Advisoriesvor 17 Std.ZDI-26-907: (0Day) Meta Detectron2 vertex_feature_embedder Deserialization of Untrusted Data Remote Code Execution Vulnerability ZZDI: Published Advisoriesvor 17 Std.ZDI-26-908: (0Day) Meta Detectron2 load_proposals_into_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability
+10
12 Quellen
Pixel users are getting a major Android Auto update – and it rivals Siri AI
11 weitere Quellen
ZZDNETvor 6 Std.Our 3 favorite Android Auto cables (and why you might want to switch to wired) ZZDNETvor 6 Std.Pixel users are getting a major Android Auto update – and it rivals Siri AI ZZDNETvor 6 Std.Our 3 favorite Android Auto cables (and why you might want to switch to wired) DDroid Lifevor 1 TagAndroid 17 QPR2 Released for Pixel Devices! RSS- Futurezonevor 17 Std.Android Auto: Für diese Smartphones ist jetzt Schluss RSS- Futurezonevor 3 Std.Android Auto: Wichtige Änderung für Pixel-Nutzer aufgetaucht – das kannst du erwarten
+5
11 Quellen
CVE-2025-68724 | Linux Kernel up to 6.12.62/6.17.12/6.18.1 crypto check_add_overflow integer overflow (EUVD-2025-205073 / Nessus ID 279784)
10 weitere Quellen
VVulDB Updatesvor 3 Std.CVE-2025-68349 | Linux Kernel up to 6.12.62/6.17.12/6.18.1 NFS_INO_LAYOUTCOMMIT reference count (EUVD-2025-205105 / Nessus ID 279775) VVulDB Updatesvor 3 Std.CVE-2025-68725 | Linux Kernel up to 6.18.1 skb_warn_bad_offload privilege escalation (Nessus ID 279716 / WID-SEC-2025-2920) VVulDB Updatesvor 3 Std.CVE-2025-68371 | Linux Kernel up to 6.12.62/6.17.12/6.18.1 scsi sdev_destroy use after free (EUVD-2025-205083 / Nessus ID 279717) VVulDB Updatesvor 3 Std.CVE-2025-68363 | Linux Kernel up to 6.12.62/6.17.12/6.18.1 /include/linux/skbuff.h __netif_receive_skb_core privilege escalation (EUVD-2025-205091 / Nessus ID 279712) VVulDB Updatesvor 3 Std.CVE-2022-50711 | Linux Kernel up to 6.0.5 mtk_probe memory leak (Nessus ID 280035 / WID-SEC-2025-2920) VVulDB Updatesvor 3 Std.CVE-2022-50707 | Linux Kernel up to 6.0.18/6.1.4 virtio-crypto virtio_crypto_alg_skcipher_close_session memory leak (Nessus ID 280043 / WID-SEC-2025-2920)
+4
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4335014/sichere-programmierung/shelf-watch-2-what-we-found-auditing-194-mcp-servers-for-code-level-sinks/