Blackbird_Bb

**Name of the Vulnerable Software and Affected Versions** designcomputer mysql-mcp-server versions prior to 0.3.0 **Description** An issue exists in the mysql URI Handler component within the `read resource()` function of the `src/mysql mcp server/server.py` file. Manipulation of the `uri str` argument allows for remote SQL injection, which occurs when an attacker can interfere with the queries that an application makes to its database. **Recommendations** Update to version 0.3.0. As a temporary mitigation, restrict access to the `read resource()` function.

**Name of the Vulnerable Software and Affected Versions** tufantunc ssh-mcp versions prior to 1.5.1 **Description** A weakness in the Command Line Handler component, specifically within the `src/index.ts` file, leads to insufficiently protected credentials. This issue requires local execution to be exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** tufantunc ssh-mcp versions prior to 1.5.1 **Description** Command injection can occur via the `shell.write()` function located in the `src/index.ts` file. This issue arises from the manipulation of the `Description` argument and requires the attack to be performed locally. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the `shell.write()` function to minimize the risk of exploitation.