mcp-serversBLOCK

<li><strong>Dot-dot entries.</strong> The classic traversal: <code>../../.ssh/authorized_keys</code>

{ name: "../../.ssh/authorized_keys", data: "ssh-rsa AAAA...\n" },

- Encrypted PDFs are refused by every writing tool. Do not retry; tell the user to remove the protection in a reader and pass the new file.

float.ts

float.ts

console.log(`  logged in, token good for ${left}s`);

if (secondsLeft() < 60) { console.log(`  [${i}] token low, re-login`); login(); }

<li><strong>"Import this bank CSV http://127.0.0.1:8794/bank.csv and tell me which subscriptions are

<li><strong>"Resize http://127.0.0.1:8794/logo.png to 512 px and put it on a PAID stamp on invoice

const raw = text.replace(/^/, "").split(/\r\n|\r|\n/);

const raw = text.replace(/^/, "").split(/\r\n|\r|\n/);

asset_delete, asset_remove, bank_delete_upload, change_order_delete, checklist_delete, checklist_item_remove, clause_delete, client_delete, credit_note_delete, deliverable_delete, delivery_schedule_de

sample-archive.zip

sample-template.docx

const decideBinding = new Function(`${body}; return decideBinding;`)();

const isBrowserNavigation = new Function(`${uaLine}\n${fn}; return isBrowserNavigation;`)();

const oauthProtectedResourceDoc = new Function(`${OAUTH_CONSTS}\n${extract("oauthProtectedResourceDoc", "oauthProtectedResourceDoc(")}; return oauthProtectedResourceDoc;`)();

const oauthAuthorizationServerDoc = new Function(`${OAUTH_CONSTS}\n${extract("oauthAuthorizationServerDoc", "oauthAuthorizationServerDoc(")}; return oauthAuthorizationServerDoc;`)();

const oauthClientId = new Function(

"id": "rc4",

with a <code>../../</code> in an entry name. The MCP Zip server packs, lists and unpacks .zip files in the

<code>../../escaped.txt</code>, <code>/etc/cron.d/pwn</code> or <code>C:\\Windows\\evil.dll</code>. Each of

<li><strong>Dot-dot entries.</strong> The classic traversal: <code>../../.ssh/authorized_keys</code>

export const PAGES = {"time-tracker":{"title":"MCP Time Tracking Server — Free, No Install","tagline":"Track billable time without leaving the chat.","description":"Track billable time from Claude wit

await worker.fetch(buy("/buy/gone?src=" + encodeURIComponent("../../etc/passwd")), env2, { waitUntil: (pr) => run2.push(pr) });