mcpsnoop

MCP के लिए Wireshark। एक पारदर्शी प्रॉक्सी जो आपके AI क्लाइंट और आपके MCP सर्वर के बीच हर वास्तविक टूल कॉल को आपके टर्मिनल में लाइव दिखाता है। समस्या आधिकारिक MCP Inspector अपने स्वयं के क्लाइंट के रूप में कनेक्ट होता है, इसलिए यह कभी नहीं देखता कि आपका क्लाइंट Cursor, Claude Code, Codex वास्तव म...

lisa.py

LLDB MCP एकीकरण यह परियोजना LLDB के लिए Model-Context Protocol MCP एकीकरण प्रदान करती है, जिससे Claude जैसे AI सहायक एक मानकीकृत इंटरफ़ेस के माध्यम से आपके डीबगिंग सत्रों के साथ बातचीत कर सकते हैं। अवलोकन एकीकरण में दो मुख्य घटक शामिल हैं: 1. server.py - एक MCP सर्वर जो Claude या अन्य MCP क्लाइंट...

http-mcp-bridge

HTTP MCP Bridge यह प्रोजेक्ट एक HTTP सर्वर लागू करता है जो HTTP/1.1 अनुरोधों और एक दूरस्थ MCP सर्वर के बीच ब्रिज के रूप में कार्य करता है, जो mcp पायथन लाइब्रेरी GitHub का उपयोग करता है। इस पहल का मुख्य उद्देश्य दूरस्थ परिवहन तंत्रों HTTP+SSE या Streamable HTTP का उपयोग करके दूरस्थ MCP सर्वरों का...

web3-decoder

Web3 Decoder Web3 Decoder एक Burp Suite एक्सटेंशन है जो web3 के स्मार्ट कॉन्ट्रैक्ट से जुड़े संचालनों का विश्लेषण करने में मदद करता है। यह मुख्य रूप से Ethereum नोड्स और अन्य संगत नेटवर्कों जैसे Polygon, Arbitrum, BSC... के नोड्स को किए जाने वाले JSON-RPC कॉल हैं। डाउनलोड और इंस्टॉल नवीनतम...

CVE-2024-49369

CVE-2024-49369 نظرة عامة تستغل هذه الثغرة بروتوكول Icinga JSON-RPC لاستهداف العقد المراقبة التي تشغل وكلاء Icinga. من خلال انتحال صفة مثيل Master/Satellite، يمكن للمهاجمين السيطرة على الوكلاء، تنفيذ أوامر عشوائية، أو الحصول على معلومات حساسة. كيفية الاستخدام المسح لمسح شبكة فرعية بحثًا عن وكلاء...

web3-decoder

مفكك Web3 Web3 Decoder هو امتداد لـ Burp Suite مصمم لتحليل عمليات البلوكتشين وتفاعلات العقود الذكية. يعالج استدعاءات JSON-RPC الموجهة إلى إيثريوم والشبكات المتوافقة بما في ذلك Polygon و Arbitrum و BSC وغيرها مفاتيح API لمستكشفي البلوكتشين معظم مستكشفي البلوكتشين المدعومين، مثل etherscan.io، يتطلب...

neto

Project Neto: A Toolkit for Analysing Browser Plugins Overview Project Neto is a Python 3 package conceived to analyse and unravel hidden features of browser plugins and extensions for well-known browsers such as Firefox and Chrome. It automates the process of unzipping the packaged files to...

CVE-2026-16895

A logic vulnerability fail-open condition has been identified within the Metasploit Framework's JSON-RPC web service interface. When an exception occurs during the database health check db.check and the environment variable MSFWSJSONRPCAPITOKEN is not explicitly set, the application resets the...

CVE-2026-16895

CVE-2026-16895 is a fail-open logic vulnerability in the Metasploit Framework 's JSON-RPC web service interface. When an exception occurs during the database health check (db.check) and the environment variable MSF_WS_JSON_RPC_API_TOKEN is not explicitly set, the internal flag msf.auth_initialize...

EUVD-2026-66836

A logic vulnerability fail-open condition has been identified within the Metasploit Framework's JSON-RPC web service interface. When an exception occurs during the database health check db.check and the environment variable MSFWSJSONRPCAPITOKEN is not explicitly set, the application resets the...

CVE-2026-16895 Authentication Bypass in Metasploit JSON-RPC Service When DB Health Check Fails

A logic vulnerability fail-open condition has been identified within the Metasploit Framework's JSON-RPC web service interface. When an exception occurs during the database health check db.check and the environment variable MSFWSJSONRPCAPITOKEN is not explicitly set, the application resets the...

CVE-2025-63080

Firmware in KAON PG5298A and PG5298B routers allow an authenticated user to send crafted JSON-RPC requests and perform operations not possible via GUI, e.g. system file read or command execution. This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B...

CVE-2025-63080

KAON PG5298A and PG5298B routers contain an insufficient access control flaw in their JSON-RPC interface . An authenticated user on the adjacent network can send crafted JSON-RPC requests to perform operations that are otherwise restricted to the GUI, enabling system file read or command executio...

EUVD-2025-210761

Firmware in KAON PG5298A and PG5298B routers allow an authenticated user to send crafted JSON-RPC requests and perform operations not possible via GUI, e.g. system file read or command execution. This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B...

CVE-2025-63080 Authenticated RCE in KAON PG5298

Firmware in KAON PG5298A and PG5298B routers allow an authenticated user to send crafted JSON-RPC requests and perform operations not possible via GUI, e.g. system file read or command execution. This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B...

Kibana 9.2.x < 9.4.5 Incorrect Authorization (ESA-2026-82)

The version of Kibana installed on the remote host is 9.2.x prior to 9.4.5. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-82 advisory. - Kibana Agent Builder A2A JSON-RPC API endpoint derives the identifier of a stored conversation from a user-supplied input, and the...

CVE-2026-76647

Leantime JSON-RPC API through version 3.9.0 contains a missing authorization vulnerability in the JSON-RPC dispatcher in app/Domain/Api/Controllers/Jsonrpc.php. The dispatcher does not enforce authorization before invoking service-layer methods, allowing an authenticated user to call methods or a...

NPM: SearXNG Basic Authentication Credentials Exposed Through MCP Logs and JSON-RPC Error Responses

NPM: SearXNG Basic Authentication Credentials Exposed Through MCP Logs and JSON-RPC Error Responses vulnerability discovered by ? in WordPress Npm mcp-searxng versions 1.12.0...

SearXNG Basic Authentication Credentials Exposed Through MCP Logs and JSON-RPC Error Responses

Summary mcp-searxng version 1.11.0 exposes SearXNG Basic Authentication credentials embedded in the SEARXNGURL environment variable. When the server starts in STDIO mode and an MCP client connects, the complete SEARXNGURL, including its username and password, is sent to the client through an MCP...

CVE-2026-76647

CVE-2026-76647 affects Leantime (JSON-RPC API through version 3.9.0), where the JSON-RPC dispatcher in app/Domain/Api/Controllers/Jsonrpc.php lacks centralized authorization enforcement before invoking service-layer methods. An authenticated user can call methods or act on resources outside their...