rename cmd injection category

nayanakto · nayanakto · commit 638c17f73f1d · 2025-08-18T14:41:56.000+05:30
diff --git a/MCP-Security-Command-Injection/CommandInjectionBase64Encoding.yml b/MCP-Security-Command-Injection/CommandInjectionBase64Encoding.yml
@@ -18,9 +18,9 @@ info:
     or full system compromise. Additionally, it can bypass security measures that
     rely on filtering or validation of user input, escalating the risk of exploitation.
   category:
-    name: MCP
-    shortName: MCP
-    displayName: Model Context Protocol (MCP) Security
+    name: MCP_MALICIOUS_CODE_EXECUTION
+    shortName: MCP_MALICIOUS_CODE_EXECUTION
+    displayName: MCP - Malicious Code Execution
   subCategory: MCP_COMMAND_INJECTION_BASE64_ENCODING
   severity: CRITICAL
   tags:
diff --git a/MCP-Security-Command-Injection/CommandInjectionBase64EncodingChained.yml b/MCP-Security-Command-Injection/CommandInjectionBase64EncodingChained.yml
@@ -25,9 +25,9 @@ info:
     to detect and prevent the attack, increasing the risk of severe consequences for
     system integrity and confidentiality.
   category:
-    name: MCP
-    shortName: MCP
-    displayName: Model Context Protocol (MCP) Security
+    name: MCP_MALICIOUS_CODE_EXECUTION
+    shortName: MCP_MALICIOUS_CODE_EXECUTION
+    displayName: MCP - Malicious Code Execution
   subCategory: MCP_COMMAND_INJECTION_BASE64_ENCODING_CHAINED
   severity: CRITICAL
   tags:
diff --git a/MCP-Security-Command-Injection/CommandInjectionCentOS.yml b/MCP-Security-Command-Injection/CommandInjectionCentOS.yml
@@ -27,9 +27,9 @@ info:
     to CentOS. Accurate identification allows attackers to craft more effective and
     focused attacks, potentially leading to greater damage and security breaches.
   category:
-    name: MCP
-    shortName: MCP
-    displayName: Model Context Protocol (MCP) Security
+    name: MCP_MALICIOUS_CODE_EXECUTION
+    shortName: MCP_MALICIOUS_CODE_EXECUTION
+    displayName: MCP - Malicious Code Execution
   subCategory: MCP_COMMAND_INJECTION_CENTOS
   severity: MEDIUM
   tags:
diff --git a/MCP-Security-Command-Injection/CommandInjectionCookieHeaderChained.yml b/MCP-Security-Command-Injection/CommandInjectionCookieHeaderChained.yml
@@ -26,9 +26,9 @@ info:
     enabling complex attacks that compromise system security, escalate privileges,
     and expose sensitive information.
   category:
-    name: MCP
-    shortName: MCP
-    displayName: Model Context Protocol (MCP) Security
+    name: MCP_MALICIOUS_CODE_EXECUTION
+    shortName: MCP_MALICIOUS_CODE_EXECUTION
+    displayName: MCP - Malicious Code Execution
   subCategory: MCP_COMMAND_INJECTION_COOKIE_HEADER_CHAINED
   severity: CRITICAL
   tags:
diff --git a/MCP-Security-Command-Injection/CommandInjectionCurl.yml b/MCP-Security-Command-Injection/CommandInjectionCurl.yml
@@ -21,9 +21,9 @@ info:
     attacks, including data breaches or system compromise, and significantly undermine
     the security posture of the organization.
   category:
-    name: MCP
-    shortName: MCP
-    displayName: Model Context Protocol (MCP) Security
+    name: MCP_MALICIOUS_CODE_EXECUTION
+    shortName: MCP_MALICIOUS_CODE_EXECUTION
+    displayName: MCP - Malicious Code Execution
   subCategory: MCP_COMMAND_INJECTION_CURL_HTTP_REQUEST
   severity: CRITICAL
   tags:
diff --git a/MCP-Security-Command-Injection/CommandInjectionCurlHTTPRequestWithChainedCommands.yml b/MCP-Security-Command-Injection/CommandInjectionCurlHTTPRequestWithChainedCommands.yml
@@ -28,9 +28,9 @@ info:
     This can lead to unauthorized access, data breaches, and a comprehensive understanding
     of the target system, increasing the risk of successful attacks and security compromises.
   category:
-    name: MCP
-    shortName: MCP
-    displayName: Model Context Protocol (MCP) Security
+    name: MCP_MALICIOUS_CODE_EXECUTION
+    shortName: MCP_MALICIOUS_CODE_EXECUTION
+    displayName: MCP - Malicious Code Execution
   subCategory: MCP_COMMAND_INJECTION_CURL_HTTP_REQUEST_CHAINED_COMMANDS
   severity: CRITICAL
   tags:
diff --git a/MCP-Security-Command-Injection/CommandInjectionMacOS.yml b/MCP-Security-Command-Injection/CommandInjectionMacOS.yml
@@ -24,9 +24,9 @@ info:
     escalation, data theft, or system compromise, as the attack is customized to the
     system's architecture and security features.
   category:
-    name: MCP
-    shortName: MCP
-    displayName: Model Context Protocol (MCP) Security
+    name: MCP_MALICIOUS_CODE_EXECUTION
+    shortName: MCP_MALICIOUS_CODE_EXECUTION
+    displayName: MCP - Malicious Code Execution
   subCategory: MCP_COMMAND_INJECTION_MACOS
   severity: CRITICAL
   tags:
diff --git a/MCP-Security-Command-Injection/CommandInjectionRHEL.yml b/MCP-Security-Command-Injection/CommandInjectionRHEL.yml
@@ -29,9 +29,9 @@ info:
     allows attackers to perform more effective and damaging attacks, potentially leading
     to significant security breaches.
   category:
-    name: MCP
-    shortName: MCP
-    displayName: Model Context Protocol (MCP) Security
+    name: MCP_MALICIOUS_CODE_EXECUTION
+    shortName: MCP_MALICIOUS_CODE_EXECUTION
+    displayName: MCP - Malicious Code Execution
   subCategory: MCP_COMMAND_INJECTION_RHEL
   severity: CRITICAL
   tags:
diff --git a/MCP-Security-Command-Injection/CommandInjectionTimeDelay.yml b/MCP-Security-Command-Injection/CommandInjectionTimeDelay.yml
@@ -21,9 +21,9 @@ info:
     vulnerability can also facilitate more sophisticated attacks, posing significant
     security risks to the application.
   category:
-    name: MCP
-    shortName: MCP
-    displayName: Model Context Protocol (MCP) Security
+    name: MCP_MALICIOUS_CODE_EXECUTION
+    shortName: MCP_MALICIOUS_CODE_EXECUTION
+    displayName: MCP - Malicious Code Execution
   subCategory: MCP_COMMAND_INJECTION_TIME_DELAY
   severity: MEDIUM
   tags:
diff --git a/MCP-Security-Command-Injection/CommandInjectionTimeDelayWithChainedCommands.yml b/MCP-Security-Command-Injection/CommandInjectionTimeDelayWithChainedCommands.yml
@@ -28,9 +28,9 @@ info:
     The ability to manipulate timing adds complexity to the attack, enhancing its
     effectiveness and impact.
   category:
-    name: MCP
-    shortName: MCP
-    displayName: Model Context Protocol (MCP) Security
+    name: MCP_MALICIOUS_CODE_EXECUTION
+    shortName: MCP_MALICIOUS_CODE_EXECUTION
+    displayName: MCP - Malicious Code Execution
   subCategory: MCP_COMMAND_INJECTION_TIME_DELAY_CHAINED
   severity: MEDIUM
   tags:
diff --git a/MCP-Security-Command-Injection/CommandInjectionURLPath.yml b/MCP-Security-Command-Injection/CommandInjectionURLPath.yml
@@ -20,9 +20,9 @@ info:
     sensitive information. This vulnerability can also result in service disruptions,
     financial loss, and damage to the organization's reputation.
   category:
-    name: MCP
-    shortName: MCP
-    displayName: Model Context Protocol (MCP) Security
+    name: MCP_MALICIOUS_CODE_EXECUTION
+    shortName: MCP_MALICIOUS_CODE_EXECUTION
+    displayName: MCP - Malicious Code Execution
   subCategory: MCP_COMMAND_INJECTION_URL_PATH
   severity: CRITICAL
   tags:
diff --git a/MCP-Security-Command-Injection/CommandInjectionURLPathChained.yml b/MCP-Security-Command-Injection/CommandInjectionURLPathChained.yml
@@ -25,9 +25,9 @@ info:
     loss, and disruption of service, posing significant risks to system integrity
     and confidentiality.
   category:
-    name: MCP
-    shortName: MCP
-    displayName: Model Context Protocol (MCP) Security
+    name: MCP_MALICIOUS_CODE_EXECUTION
+    shortName: MCP_MALICIOUS_CODE_EXECUTION
+    displayName: MCP - Malicious Code Execution
   subCategory: MCP_COMMAND_INJECTION_URL_PATH_CHAINED
   severity: CRITICAL
   tags:
diff --git a/MCP-Security-Command-Injection/CommandInjectionUbuntu.yml b/MCP-Security-Command-Injection/CommandInjectionUbuntu.yml
@@ -27,9 +27,9 @@ info:
     of successful attacks, potentially leading to unauthorized access, data breaches,
     or system compromise by exploiting known issues in the Ubuntu environment.
   category:
-    name: MCP
-    shortName: MCP
-    displayName: Model Context Protocol (MCP) Security
+    name: MCP_MALICIOUS_CODE_EXECUTION
+    shortName: MCP_MALICIOUS_CODE_EXECUTION
+    displayName: MCP - Malicious Code Execution
   subCategory: MCP_COMMAND_INJECTION_UBUNTU
   severity: CRITICAL
   tags:
diff --git a/MCP-Security-Command-Injection/CommandInjectionUserAgentHeaderChained.yml b/MCP-Security-Command-Injection/CommandInjectionUserAgentHeaderChained.yml
@@ -25,9 +25,9 @@ info:
     complexity and potential severity, increasing risks to system integrity, confidentiality,
     and availability.
   category:
-    name: MCP
-    shortName: MCP
-    displayName: Model Context Protocol (MCP) Security
+    name: MCP_MALICIOUS_CODE_EXECUTION
+    shortName: MCP_MALICIOUS_CODE_EXECUTION
+    displayName: MCP - Malicious Code Execution
   subCategory: MCP_COMMAND_INJECTION_USER_AGENT_HEADER_CHAINED
   severity: CRITICAL
   tags:
diff --git a/MCP-Security-Command-Injection/CommandInjectionVariableAssignChainedCommands.yml b/MCP-Security-Command-Injection/CommandInjectionVariableAssignChainedCommands.yml
@@ -26,9 +26,9 @@ info:
     execute complex sequences of operations, leading to data breaches, system instability,
     and escalated privileges.
   category:
-    name: MCP
-    shortName: MCP
-    displayName: Model Context Protocol (MCP) Security
+    name: MCP_MALICIOUS_CODE_EXECUTION
+    shortName: MCP_MALICIOUS_CODE_EXECUTION
+    displayName: MCP - Malicious Code Execution
   subCategory: MCP_COMMAND_INJECTION_VARIABLE_ASSIGN_CHAINED
   severity: CRITICAL
   tags:
diff --git a/MCP-Security-Command-Injection/CommandInjectionVariableAssignment.yml b/MCP-Security-Command-Injection/CommandInjectionVariableAssignment.yml
@@ -23,9 +23,9 @@ info:
     Ensuring robust input validation and sanitization is crucial to mitigate such
     risks.
   category:
-    name: MCP
-    shortName: MCP
-    displayName: Model Context Protocol (MCP) Security
+    name: MCP_MALICIOUS_CODE_EXECUTION
+    shortName: MCP_MALICIOUS_CODE_EXECUTION
+    displayName: MCP - Malicious Code Execution
   subCategory: MCP_COMMAND_INJECTION_VARIABLE_ASSIGN
   severity: CRITICAL
   tags:
diff --git a/MCP-Security-Command-Injection/CommandInjectionWithParameters.yml b/MCP-Security-Command-Injection/CommandInjectionWithParameters.yml
@@ -21,9 +21,9 @@ info:
     or deleting data, and disrupting services. This can result in significant financial
     losses, reputational damage, and legal consequences for affected organizations.
   category:
-    name: MCP
-    shortName: MCP
-    displayName: Model Context Protocol (MCP) Security
+    name: MCP_MALICIOUS_CODE_EXECUTION
+    shortName: MCP_MALICIOUS_CODE_EXECUTION
+    displayName: MCP - Malicious Code Execution
   subCategory: MCP_COMMAND_INJECTION_WITH_OPERATORS
   severity: CRITICAL
   tags:
diff --git a/MCP-Security-Command-Injection/CommandInjectionWithRedirectionAndVarManipulation.yml b/MCP-Security-Command-Injection/CommandInjectionWithRedirectionAndVarManipulation.yml
@@ -22,9 +22,9 @@ info:
     security vulnerabilities and operational disruptions, making robust input validation
     and secure variable handling crucial.
   category:
-    name: MCP
-    shortName: MCP
-    displayName: Model Context Protocol (MCP) Security
+    name: MCP_MALICIOUS_CODE_EXECUTION
+    shortName: MCP_MALICIOUS_CODE_EXECUTION
+    displayName: MCP - Malicious Code Execution
   subCategory: MCP_COMMAND_INJECTION_WITH_REDIRECTION_AND_VAR_MANIPULATION
   severity: CRITICAL
   tags:
diff --git a/MCP-Security-Command-Injection/CommandInjectionWithRedirectionAndVariableManipulationWithChaining.yml b/MCP-Security-Command-Injection/CommandInjectionWithRedirectionAndVariableManipulationWithChaining.yml
@@ -28,9 +28,9 @@ info:
     security, escalate privileges, and facilitate further exploitation or data breaches,
     posing a serious risk to the integrity and confidentiality of the affected system.
   category:
-    name: MCP
-    shortName: MCP
-    displayName: Model Context Protocol (MCP) Security
+    name: MCP_MALICIOUS_CODE_EXECUTION
+    shortName: MCP_MALICIOUS_CODE_EXECUTION
+    displayName: MCP - Malicious Code Execution
   subCategory: MCP_COMMAND_INJECTION_WITH_REDIRECTION_AND_VAR_MANIPULATION_CHAINED
   severity: CRITICAL
   tags:
