UAP-protocol

root@kitploit: ██╗ ██╗ █████╗ ██████╗ ██║ ██║██╔══██╗██╔══██╗ ██║ ██║███████║██████╔╝ ██║ ██║██╔══██║██╔═══╝ ╚██████╔╝██║ ██║██║ ╚═════╝ ╚═╝ ╚═╝╚═╝ Universal Agent Protocol Un protocolo de comunicación unificado y centrado en la seguridad para el acceso a herramientas, la coordinación de agentes ...

trust-boundary-ctf

🐘 Trust Boundary: MCP Session Isolation CTF La consola muestra Sesión Activa. Cada llamada a la herramienta tiene éxito. El token OAuth del administrador está en cada respuesta. Trust Boundary es un laboratorio CTF basado en navegador construido alrededor de una falla real de aislamiento de sesió...

Critical Vulnerability in Anthropic's MCP Exposes Developer Machines to Remote Exploits

Cybersecurity researchers have discovered a critical security vulnerability in artificial intelligence AI company Anthropic's Model Context Protocol MCP Inspector project that could result in remote code execution RCE and allow an attacker to gain complete access to the hosts. The vulnerability,...

@cyanheads/git-mcp-server (>=2.0.10, <=2.1.0), @dsazz/mcp-confluence (0.2.0) +34 more potentially affected by CVE-2025-49596 via @modelcontextprotocol/inspector (>=0.2.7, <=0.13.0)

@modelcontextprotocol/inspector NPM version =0.2.7, =2.0.10, =1.0.1, =0.0.0-alpha.0, =1.0.0, =0.1.0, =0.1.2 and more Source cves: CVE-2025-49596 Source advisory: OSV:GHSA-7F8R-222P-6F5G...

CVE-2025-49596

creationtimestamp| type| source ---|---|--- 2025-06-13 20:35:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18339 2025-06-13 21:00:48+00:00| published-proof-of-concept| Telegram/YLjaHgOWqHyGE2pMNrZj7KRcmqTuBmFaJ1673d7IeXnQg 2025-06-13 21:22:16+00:00| seen|...

CVE-2025-49596 MCP Inspector proxy server lacks authentication between the Inspector client and proxy

The MCP inspector is a developer tool for testing and debugging MCP servers. Versions of MCP Inspector below 0.14.1 are vulnerable to remote code execution due to lack of authentication between the Inspector client and proxy, allowing unauthenticated requests to launch MCP commands over stdio...