CVE-2023-5089

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2023-5089 Run bellow command to check CVE-2023-5089 -h Configurations 2. We integrated with the Telegram API to receive...

Discord-Rat

For educational purposes only!! Discord Rat - Setup Guide Author : @deadconvicess | Packaged By: deadconvicess License : MIT WHAT YOU NEED 1. Python 3.11+ Installed 2. A Discord Bot Token https://discord.com/developers/applications 3. A Discord Webhook URL Discord Channel Integrations Webhooks 4...

CVE-2026-116686 Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas

The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, ClientSession, ClientSessionGroup, and Client tool calls validate server-declared outputSchema documents with jsonschema's default resolver, causing...

CVE-2026-116686 Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas

The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, ClientSession, ClientSessionGroup, and Client tool calls validate server-declared outputSchema documents with jsonschema's default resolver, causing...

CVE-2026-116686

The Model Context Protocol Python SDK contains a vulnerability in versions 1.10.0 through 1.30.0 and 2.2.0 . The ClientSession, ClientSessionGroup, and Client tool calls use the default resolver in jsonschema to validate server-declared outputSchema documents. This allows a server to provide an u...

EUVD-2026-111366

The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, ClientSession, ClientSessionGroup, and Client tool calls validate server-declared outputSchema documents with jsonschema's default resolver, causing...

CVE-2026-116686

The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, ClientSession, ClientSessionGroup, and Client tool calls validate server-declared outputSchema documents with jsonschema's default resolver, causing...

CVE-2026-116686 Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas

The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, ClientSession, ClientSessionGroup, and Client tool calls validate server-declared outputSchema documents with jsonschema's default resolver, causing...

CVE-2026-116685 Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies

The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.8.0 until 1.30.0 and 2.2.0, streamablehttpclient, streamablehttpclient, sseclient, ClientSessionGroup, OAuth, and createmcphttpclient client paths enable followredirects and...

CVE-2026-116685

The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.8.0 until 1.30.0 and 2.2.0, streamablehttpclient, streamablehttpclient, sseclient, ClientSessionGroup, OAuth, and createmcphttpclient client paths enable followredirects and...

EUVD-2026-111367

The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.8.0 until 1.30.0 and 2.2.0, streamablehttpclient, streamablehttpclient, sseclient, ClientSessionGroup, OAuth, and createmcphttpclient client paths enable followredirects and...

CVE-2026-116685

The Model Context Protocol Python SDK is vulnerable in versions 1.8.0 up to 1.30.0 and 2.2.0 due to how its HTTP client transports handle redirects. Specifically, the streamable_http_client, streamablehttp_client, sse_client, ClientSessionGroup, OAuth, and create_mcp_http_client paths may follow ...

CVE-2026-116685 Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies

The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.8.0 until 1.30.0 and 2.2.0, streamablehttpclient, streamablehttpclient, sseclient, ClientSessionGroup, OAuth, and createmcphttpclient client paths enable followredirects and...

RCE-Cacti-1.2.22

RCE-Cacti-1.2.22 This is exploit code for CVE-2022-46169, which I recreated using Python3! If you are working on an HTB machine, this might be useful... 🤞✨...

CVE-2026-116684

The Model Context Protocol Python SDK versions 1.10.0 through 1.30.0 and 2.2.0 are vulnerable to a resource-confusion flaw in the server-side bearer authentication. When configured via AuthSettings with token_verifier, the TokenVerifier fails to independently validate the aud audience , causing t...

CVE-2026-116684 Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server

The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, server-side bearer authentication configured through AuthSettings with tokenverifier accepts a valid token issued for another service when the...

EUVD-2026-111369

The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, server-side bearer authentication configured through AuthSettings with tokenverifier accepts a valid token issued for another service when the...

CVE-2026-116684

The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, server-side bearer authentication configured through AuthSettings with tokenverifier accepts a valid token issued for another service when the...

CVE-2026-116684 Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server

The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, server-side bearer authentication configured through AuthSettings with tokenverifier accepts a valid token issued for another service when the...

CVE-2019-5029

CVE-2019-5029 This is a Python script PoC for CVE-2019-5029. It is a RCE for Exhibitor Web UI 1.7.1. How to use Clone this repo git clone https://github.com/yZ1337/CVE-2019-5029.git Execute as follows python3 CVE-2019-5029.py Make sure the request inside the script is the same as the request of t...