Skip to content
OpenAdvisories

Vendor

NocteDefensor

5 known vulnerabilities.

Products

4 results · Clear filters · Feed

  • Medium 6.3

    NocteDefensor LudusMCP read_range_config rangeConfig.ts server-side request forgery

    A vulnerability has been found in NocteDefensor LudusMCP 1.0.24. Affected by this vulnerability is an unknown functionality of the file src/tools/rangeConfig.ts of the component read_range_config. The manipulation of the argument Source leads to server-side r…

  • Medium 5.3

    NocteDefensor LudusMCP insert_creds_range_config insertCredsRangeConfig.ts path traversal

    A flaw has been found in NocteDefensor LudusMCP up to 1.0.24. Affected is an unknown function of the file src/tools/insertCredsRangeConfig.ts of the component insert_creds_range_config. Executing a manipulation of the argument configPath/outputPath can lead t…

  • Medium 5.3

    NocteDefensor LudusMCP ludus_cli_execute cliWrapper.ts executeCommand command injection

    A vulnerability was detected in NocteDefensor LudusMCP up to 1.0.24. This affects the function executeArbitraryCommand/executeCommand of the file src/ludusMCP/cliWrapper.ts of the component ludus_cli_execute. Performing a manipulation of the argument command/…

  • Medium 5.3

    NocteDefensor LudusMCP get_credential_from_user secretDialog.ts SecretDialog.showSecretDialog command injection

    A weakness has been identified in NocteDefensor LudusMCP up to 1.0.24. The affected element is the function SecretDialog.showSecretDialog of the file src/utils/secretDialog.ts of the component get_credential_from_user. This manipulation of the argument Descri…