claude-project-scanner

Claude Project Scanner Read-only Claude Code skill that scans third-party projects for known security risks before you open them. Catches the attack patterns documented in: CVE-2025-59536 Claude Code Lifecycle Hooks injection CVE-2025-61260 OpenAI Codex CODEXHOME injection CVE-2025-54136 Cursor...

LiteLLM 1.18.10 - Command Injection

LiteLLM 1.18.10 contains a remote code execution caused by lack of validation of arbitrary command and args in MCP server creation, letting attackers execute OS commands remotely, exploit requires crafted JSON configuration. id: CVE-2026-30623 info: name: LiteLLM 1.18.10 - Command Injection autho...

wp-secure-mcp

wp-secure-mcp In plain terms: this lets an AI agent read and lightly write to a WordPress site through a real WordPress Application Password — the same credential type wp-admin already issues — and nothing else. There is no sign-up form, no OAuth client registration, no token endpoint of any kind...

CVE-2026-114123

D365 F&O MCP Server is a Model Context Protocol server for querying Dynamics 365 Finance & Operations X++ code and metadata. Prior to version 1.11.0, the officially documented Azure one-click deployment uses infrastructure/azuredeploy.json and infrastructure/main.bicep to default the apiKey...

CVE-2026-114123

The D365 F&O MCP Server is vulnerable to unauthenticated access in versions prior to 1.11.0 due to insecure default configurations in the official Azure one-click deployment. The deployment files (infrastructure/azuredeploy.json and infrastructure/main.bicep) default the apiKey to an empty string...

CVE-2026-33980

CVE-2026-33980 — KQL Injection in adx-mcp-server via tablename parameter Severity : High CVSS 8.3 CWE : CWE-943 — Improper Neutralization of Special Elements in Data Query Logic Affected : adx-mcp-server = 1.1.0 Advisory : GHSA-vphc-468g-8rfp NVD : https://nvd.nist.gov/vuln/detail/CVE-2026-33980...

MCPwnfluence

MCPwnfluence — CVE-2026-27825 & CVE-2026-27826 Two critical vulnerabilities in mcp-atlassian, one of the most popular MCP servers in the ecosystem 4.4K+ GitHub stars, 4M+ downloads. Discovered by the team at Pluto Security. The Vulnerabilities CVE| CVSS| Type| Description ---|---|---|---...

CVE-2026-23744

CVE-2026-23744 Exploit to MCPJam Inspector Install libraries with: pip install -r requirements.txt - use python CVE-2026-23744 --help to info MCPJam inspector is the local-first development platform for MCP servers. The Latest version Versions 1.4.2 and earlier are vulnerable to remote code...

CVE-2026-34200

Nhost MCP Server: One-Click Infrastructure Compromise Official Advisory: This vulnerability was acknowledged and published by Nhost: GHSA-6c5x-3h35-vvw2 This repository documents a vulnerability in the Nhost Local MCP Server. The service lacks inbound authentication and implements a permissive CO...

CVE-2026-114090

Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability in the trigger dev --mcp server, which binds all network interfaces and exposes the /sse and /messages endpoints. LAN attackers or malicious web pages can send MCP tools/call requests to invoke trigger-task...

CVE-2026-114090

The Trigger.dev cli-v3 (versions 3.0.0 before 4.5.4 ) is vulnerable to a missing authentication flaw in the trigger dev --mcp server. The server binds to all network interfaces, exposing the /sse and /messages endpoints. This allows LAN attackers or malicious web pages to send MCP tools/call requ...

EUVD-2026-106893

Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability in the trigger dev --mcp server, which binds all network interfaces and exposes the /sse and /messages endpoints. LAN attackers or malicious web pages can send MCP tools/call requests to invoke trigger-task...

CVE-2026-114090 Trigger.dev CLI 3.0.0 before 4.5.4 Missing Authentication in MCP Server

Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability in the trigger dev --mcp server, which binds all network interfaces and exposes the /sse and /messages endpoints. LAN attackers or malicious web pages can send MCP tools/call requests to invoke trigger-task...

CVE-2026-114090 Trigger.dev CLI 3.0.0 before 4.5.4 Missing Authentication in MCP Server

Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability in the trigger dev --mcp server, which binds all network interfaces and exposes the /sse and /messages endpoints. LAN attackers or malicious web pages can send MCP tools/call requests to invoke trigger-task...

CVE-2026-114090

Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability in the trigger dev --mcp server, which binds all network interfaces and exposes the /sse and /messages endpoints. LAN attackers or malicious web pages can send MCP tools/call requests to invoke trigger-task...

PT-2026-120216

Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability in the trigger dev --mcp server, which binds all network interfaces and exposes the /sse and /messages endpoints. LAN attackers or malicious web pages can send MCP tools/call requests to invoke trigger-task...

CVE-2026-111771

In affected versions, the SDK's server-side bearer authentication had no way to check that a token was issued for your server its audience. Where one authorization server issues tokens for several services, a valid token for another service was also accepted by your MCP server...

CVE-2026-22785

CVE-2026-22785 Reproduction Tutorial Vulnerability Overview CVE : CVE-2026-22785 Impact : orval = 7.18.0 CVSS : 9.3 CRITICAL Type : Code Injection Vulnerability Principle orval Example python cvetool.py shell whoami python cvetool.py shell "node --version" python cvetool.py shell dir Scan files...

CVE-2026-23744-POC

CVE-2026-23744 — MCP Server Unauthenticated RCE Proof-of-Concept exploit byd3vn0mi Overview CVE-2026-23744 is an unauthenticated Remote Code Execution RCE vulnerability in MCP-compatible servers exposed on port 6274. The /api/mcp/connect endpoint accepts a serverConfig object that allows callers ...

mcp-server-attestation

Part of theStudioMeyer MCP Stack — Built in Mallorca 🌴 · ⭐ if you use it mcp-server-attestation Layer-2 supply-chain hardening for Model Context Protocol servers. Ed25519-signed tool manifests, runtime spawn-attestation, default-deny argument sanitizer. Direct response to: OX Security...