Lucene search
+L

79 matches found

Kitploit
Kitploit
β€’added 2026/09/16 3:46 p.m.β€’6 views

CVE-2026-23744

CVE-2026-23744: Unauthenticated Remote Code Execution in @mcpjam/inspector DISCLAIMER: This repository and the associated scripts are intended solely for authorized security assessments, penetration testing, security research, and educational analysis. Unauthorized testing of systems without...

9.8CVSS6.2AI score0.64842EPSS
SaveExploits41
Kitploit
Kitploit
β€’added 2026/09/16 3:18 p.m.β€’5 views

CVE-2026-23744-POC

CVE-2026-23744 β€” MCPJam Inspector Unauthenticated RCE MCPJam Inspector -i -p -m...

9.8CVSS6.3AI score0.64842EPSS
SaveExploits41
Kitploit
Kitploit
β€’added 2026/09/16 2:29 p.m.β€’13 views

CVE-2026-23744-PoC

Description MCPJam inspector is the local-first development platform for MCP servers. Versions 1.4.2 and earlier are vulnerable to remote code execution RCE vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Sinc...

9.8CVSS6.5AI score0.64842EPSS
SaveExploits41
Kitploit
Kitploit
β€’added 2026/09/16 1:07 p.m.β€’7 views

mcpExec

mcpExec is a tool that takes advantage of the CVE-2026-23744 to gather a reverse shell using the URL of the vulnerable MCPJam Inspector installation. Installation root@kitploit: git clone https://github.com/daemoncibsec/mcpExec.git cd mcpExec python3 -m venv venv source venv/bin/activate pip...

9.8CVSS6.3AI score0.64842EPSS
SaveExploits41
Kitploit
Kitploit
β€’added 2026/09/16 12:39 p.m.β€’7 views

CVE-2026-23744

CVE-2026-23744 MCPJam inspector Remote-Code-Execution: Proof Of Concept POC usage: root@kitploit: python3 cve-2026-23744.py --target https:// --att-ip --att-p...

9.8CVSS6.3AI score0.64842EPSS
SaveExploits41
Kitploit
Kitploit
β€’added 2026/09/16 12:06 p.m.β€’7 views

mcpjaminspector-unauth-rce

mcpjaminspector-unauth-rce CVE-2026-23744 RCE en MCPJam inspector = 1.4.2 Detalles de la vulnerabilidad https://github.com/MCPJam/inspector/security/advisories/GHSA-232v-j27c-5pp6 Uso root@kitploit: usage: mcpjaminspector-unauth-rce.py -h --target TARGET --command COMMAND options: -h, --help show...

9.8CVSS6.4AI score0.64842EPSS
SaveExploits41References1
Kitploit
Kitploit
β€’added 2026/09/16 11:25 a.m.β€’6 views

mcpjam-cve-2026-23744-validator

MCPJam Inspector Authorized Security Validator A bounded proof-of-concept validator for CVE-2026-23744 affecting vulnerable MCPJam Inspector deployments. This project is an independent, non-destructive validation tool for the previously disclosed CVE-2026-23744. It is not the original vulnerabili...

9.8CVSS7.1AI score0.64842EPSS
SaveExploits41References2
Kitploit
Kitploit
β€’added 2026/09/16 4:31 a.m.β€’7 views

CVE-2026-23744

CVE-2026-23744 β€” MCPJam Inspector Unauthenticated RCE Unauthenticated remote code execution PoC for CVE-2026-23744. MCPJam Inspector 1.4.2 and earlier expose functionality through /api/mcp/connect that can launch an attacker-controlled MCP server command without authentication. For authorized...

9.8CVSS6.7AI score0.64842EPSS
SaveExploits41
Kitploit
Kitploit
β€’added 2026/09/16 3:20 a.m.β€’9 views

PoC-CVE-2026-23744

PoC-CVE-2026-23744 EjecuciΓ³n Remota de CΓ³digo en MCPJam Inspector Referencia https://github.com/MCPJam/inspector/security/advisories/GHSA-232v-j27c-5pp6...

9.8CVSS7AI score0.64842EPSS
SaveExploits41References1
Kitploit
Kitploit
β€’added 2026/09/16 3:11 a.m.β€’12 views

CVE-2026-23744-script

Un script para CVE-2026-23744, que explota MCPJam Inspector versiones = 1.4.2. Basado en el comando curl utilizado aquΓ­: https://github.com/advisories/GHSA-232v-j27c-5pp6 AsegΓΊrate de que tu archivo /etc/hosts sea correcto y apunte al dominio/vhost del objetivo...

9.8CVSS6AI score0.64842EPSS
SaveExploits41References1
Nuclei
Nuclei
β€’added 2026/09/16 2:04 a.m.β€’129 views

MCPJam Inspector - Remote Code Execution

MCPJam inspector is the local-first development platform for MCP servers. The Latest version 1.4.2 and earlier are vulnerable to a remote code execution RCE vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. id:...

9.8CVSS6.4AI score0.64842EPSS
SaveExploits41References3
Kitploit
Kitploit
β€’added 2026/09/15 7:52 p.m.β€’8 views

cve-2026-23744

CVE-2026-23744 – MCPJam Inspector Unauthenticated Remote Code Execution RCE Description Product : MCPJam Inspector Affected versions : ≀ 1.4.2 Fixed version : 1.4.3 Type : Unauthenticated Remote Code Execution RCE Attack vector : Network Authentication required : No User interaction required : No...

9.8CVSS6.6AI score0.64842EPSS
SaveExploits41
Kitploit
Kitploit
β€’added 2026/09/15 2:33 p.m.β€’11 views

DevHub-HTB-Walkthrough

DevHub – HTB Walkthrough Medium Linux Machine: DevHub Difficulty: Medium OS: Linux Topics: CVE-2026-23744, Chisel Tunneling, Jupyter, Flask API, Root Privilege Escalation πŸ“Œ 1. Reconnaissance root@kitploit: nmap -sC -sV devhub.htb Result: root@kitploit: Port 22 SSH Port 80 HTTP Port 6274 MCPJam...

9.8CVSS6.3AI score0.64842EPSS
SaveExploits41
Kitploit
Kitploit
β€’added 2026/09/15 8:47 a.m.β€’13 views

CVE-2026-23744-PoC

CVE-2026-23744-PoC Poc sobre vulnerabilidad en MCP Server. automatizado para la parte del post con el cuerpo correcto. path vulnerable: root@kitploit: /api/mcp/connect metodo por curl: root@kitploit: curl http://evil.com:6274/api/mcp/connect --header "Content-Type: application/json" --data...

9.8CVSS6.7AI score0.64842EPSS
SaveExploits41
Kitploit
Kitploit
β€’added 2026/09/15 6:10 a.m.β€’8 views

CVE-2026-23744

CVE-2026-23744 Description MCPJam inspector is a local-first development platform for MCP servers. The versions =1.4.2 are vulnerable to remote code execution vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Fo...

9.8CVSS6.6AI score0.64842EPSS
SaveExploits41
Kitploit
Kitploit
β€’added 2026/09/15 5:50 a.m.β€’10 views

CVE-2026-23744

CVE-2026-23744 CVE-2026-23744 RCE While analyzing this vulnerability, I discovered that MCPJam Inspector exposed the /api/mcp/connect endpoint to the network by binding to 0.0.0.0. This endpoint accepts a JSON object containing serverConfig, including the fields command and args. The application...

9.8CVSS6.2AI score0.64842EPSS
SaveExploits41
Kitploit
Kitploit
β€’added 2026/09/15 1:45 a.m.β€’12 views

HTB-DevHub

HackTheBox β€” DevHub CVE-2026-23744 | MCPJam Inspector Unauthenticated RCE Difficulty: Medium OS: Linux Exploitation Chain root@kitploit: β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”‚ CVE-2026-23744 β”‚ β”‚ Unauthenticated POST β†’ /api/mcp/connect β”‚...

9.8CVSS6.3AI score0.64842EPSS
SaveExploits41
Kitploit
Kitploit
β€’added 2026/09/15 12:46 a.m.β€’5 views

CVE-2026-23744-MCPJam-Exploit

CVE-2026-23744 MCPJam Inspector RCE Exploit ⚠️ DISCLAIMER This tool is for authorized security testing and educational purposes ONLY. Unauthorized use is illegal. Users assume all responsibility for their actions. πŸ“‹ Overview This repository contains a proof-of-concept exploit for CVE-2026-23744 ,...

9.8CVSS6.5AI score0.64842EPSS
SaveExploits41References3
Kitploit
Kitploit
β€’added 2026/09/14 11:50 a.m.β€’10 views

CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2

CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2 A critical RCE vulnerability in MCPJam Inspector 3.Start the exploit root@kitploit: python3 CVE-2026-23744.py -u -i -p 4.For better usage I recomend to update the terminal to a fully funcional one , otherwise u wont be able to use commands like ctrl^...

9.8CVSS6.6AI score0.64842EPSS
SaveExploits41
Kitploit
Kitploit
β€’added 2026/09/14 11:48 a.m.β€’9 views

CVE-2026-23744-RCE

MCPJam Inspector v1.4.2 - RCE Exploit Vulnerability Description MCPJam Inspector contains an unauthenticated Remote Code Execution RCE vulnerability in the /api/mcp/connect endpoint. The vulnerability allows attackers to execute arbitrary commands by sending a malicious MCP server configuration...

9.8CVSS7AI score0.64842EPSS
SaveExploits41
Rows per page
Query Builder