siyuan-mcp-admin-takeover-cve-2026-66012-missing-authorization

CVE-2026-66012 — Prise de contrôle administrateur non authentifiée de SiYuan MCP Preuve de concept pour CVE-2026-66012 CVSS 10.0 Critique, une vulnérabilité d'absence d'autorisation dans le point de terminaison MCP Model Context Protocol de SiYuan qui permet à un attaquant non authentifié de...

OWASP-MCP-Threat-Modeling

لا يحتوي هذا المستودع على ملف README...

mcp-stdio-shellguard

Partie de lapile MCP StudioMeyer — Construit à Majorque 🌴 · ⭐ si vous l'utilisez mcp-stdio-shellguard Bundle de défense en profondeur pour les serveurs MCP stdio. Enveloppe childprocess.exec/spawn avec allowlist + sandbox + détection de rejeu, plus un CLI d'audit AST mcp-shellguard-audit qui...

cortex

CORTEX v1.0.0 — УСТАНОВКА И БЫСТРЫЙ СТАРТ Cortex v1.0.0 поставляется как одно портативное приложение для Windows: cortex.exe. Инструментальные среды выполнения x64 и x86 находятся в папке runtime и выбираются автоматически для каждой цели. Больше ничего устанавливать не нужно ни Qt, ни Visual C++...

mcp-server-attestation

جزء منمجموعة أدوات StudioMeyer MCP — بُنِي في مايوركا 🌴 · ⭐ إذا استخدمته mcp-server-attestation تقوية سلسلة التوريد من المستوى الثاني لخوادم بروتوكول سياق النموذج MCP. بيانات أدوات موقعة بـ Ed25519، توثيق وقت التشغيل للـ spawn، مصفف وسائط رفض افتراضي. رد مباشر على: تسمم سوق OX Security، أبريل 202...

cve-2026-23744

CVE-2026-23744 – MCPJam Inspector تنفيذ تعليمات برمجية عن بُعد دون مصادقة RCE الوصف المنتج : MCPJam Inspector الإصدارات المتأثرة : ≤ 1.4.2 الإصدار المُصحَّح : 1.4.3 النوع : تنفيذ تعليمات برمجية عن بُعد دون مصادقة RCE ناقل الهجوم : الشبكة المصادقة المطلوبة : لا تفاعل المستخدم المطلوب : لا CVSS v3....

CTT-Serverless-RCE-v1.0---Convergent-Time-Theory-Enhanced-MCP-Exploit

CTT-Serverless-RCE-v1.0---Convergent-Time-Theory-Enhanced-MCP-Exploit خادم MCP لإطار العمل Serverless CVE-2025-69256 النتيجة الأساسية: 9.4/10 ← النتيجة المعززة بـ CTT: 9.9/10 ثغرة خطيرة لحقن الأوامر في خادم MCP بروتوكول سياق النموذج لإطار العمل Serverless معززة بالرنين الزمني لـ CTT لموثوقية...

-Educational-PoC-CVE-2026-23520

CVE-2026-23520 : Connexion RCE du Model Context Protocol MCP - PoC Éducatif - Arcane AVERTISSEMENT : Ce dépôt et les scripts qu'il contient sont strictement destinés à des fins éducatives et académiques uniquement. Les informations fournies ici ont pour but d'aider les chercheurs en sécurité, les...

CVE-2026-76286

In Splunk MCP Server versions below 1.2.1, Splunk MCP Server could send the Splunk platform authentication token of a user who runs a custom Application Programming Interface API tool to the URL configured for that tool. If another user controls that URL, they could capture the token and use it t...

CVE-2026-76286 Server-Side Request Forgery (SSRF) through Custom API Tools in Splunk MCP Server

In Splunk MCP Server versions below 1.2.1, Splunk MCP Server could send the Splunk platform authentication token of a user who runs a custom Application Programming Interface API tool to the URL configured for that tool. If another user controls that URL, they could capture the token and use it t...

EUVD-2026-94587

In Splunk MCP Server versions below 1.2.1, Splunk MCP Server could send the Splunk platform authentication token of a user who runs a custom Application Programming Interface API tool to the URL configured for that tool. If another user controls that URL, they could capture the token and use it t...

CVE-2026-76286

The Splunk MCP Server is vulnerable to a Server-Side Request Forgery (SSRF) in versions below 1.2.1 . A user with the mcp_tool_execute capability can be induced to run a custom API tool configured by another user. This flaw allows the server to send the executing user's Splunk platform authentica...

Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration

Summary Before Langflow 1.10.3, the MCP stdio transport launched whatever command / args a user put in an MCP server configuration, with no allowlist and before 1.10.3 wrapped in bash -c "exec command ...". Any user able to reach the MCP server settings "Settings → MCP Servers → Add MCP Server",...

EUVD-2026-92788

Langflow: OS command injection RCE via arbitrary command in MCP stdio server configuration...

GHSA-W794-RJ3P-XV45 Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration

Summary Before Langflow 1.10.3, the MCP stdio transport launched whatever command / args a user put in an MCP server configuration, with no allowlist and before 1.10.3 wrapped in bash -c "exec command ...". Any user able to reach the MCP server settings "Settings → MCP Servers → Add MCP Server",...

Langflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers

Summary Langflow's project-scoped MCP transport authenticates the caller for the projectid in the connection URL, but the subsequent resources/read operation does not authorize the resource URI being requested. An authenticated user can connect to their own project-scoped MCP endpoint and supply ...

EUVD-2026-92796

Langflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers...

GHSA-4HMC-CFM3-W43C Langflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers

Summary Langflow's project-scoped MCP transport authenticates the caller for the projectid in the connection URL, but the subsequent resources/read operation does not authorize the resource URI being requested. An authenticated user can connect to their own project-scoped MCP endpoint and supply ...

wp-secure-mcp

wp-secure-mcp En termes simples : cela permet à un agent IA de lire et d'écrire légèrement sur un site WordPress via un véritable mot de passe d'application WordPress — le même type d'identifiant que wp-admin délivre déjà — et rien d'autre. Il n'y a pas de formulaire d'inscription, pas...

Security Bulletin: IBM Bob is vulnerable to Remote Code Execution due to improper control of workspace-defined MCP server execution (CVE-2026-9764)

Summary IBM Bob could allow a remote attacker to execute arbitrary code when a user opens an untrusted repository in Bob Shell. Due to insufficient validation of workspace-provided MCP server configurations, MCP servers defined within the repository could be automatically executed without explici...