Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers

In 2024, MCP Model Context Protocol set out to become the USB-C of AI: one standard for connecting models, agents, and IDEs to tools and data. The protocol delivered. Thousands of developers built servers, and enterprises plugged them into agent workflows. The ecosystem around it fell short...

CVE-2018-18026

CVE-2018-18026 PoC Code for CVE-2018-18026 You can find out more @ https://downwithup.github.io/CVEPosts.html Vulnerable Software Download @: https://www.iobit.com/en/malware-fighter.php...

reproof

Reproof Reproduction + proof. PoC or it didn't happen. R...

CVE-2026-31525

cve-id ⚡ Uso simple Use este proyecto solo en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Configuraciones de laboratorio aisladas Entornos de pruebas de penetración autorizados Configuración de ejemplo: git clone cd Ejemplo de uso: Install dependencies Run...

CVE-2026-35616

cve-id ⚡ Uso Simple Utilice este proyecto únicamente en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Configuraciones de laboratorio aisladas Entornos de pruebas de penetración autorizados Configuración de ejemplo: git clone cd Ejemplo de uso: Install...

robin

Robin: strumento OSINT per il dark web basato sull'IA Robin è uno strumento basato sull'IA per condurre indagini OSINT sul dark web. Sfrutta gli LLM per perfezionare le query, filtrare i risultati di ricerca dai motori di ricerca del dark web e fornire un riepilogo dell'indagine. Installazione •...

MI5 Says China’s MSS Funded Research Involving 100+ U.K.-Linked Academics

The U.K.'s domestic intelligence and security agency has warned that more than 100 academics have helped China boost its intelligence gathering efforts on behalf of Beijing's state security service. In a "Security Service Espionage Alert" issued on September 30, 2026, MI5 said the "primary purpos...

CVE-2025-55182

CVE-2025-55182 React2Shell PoC среда Предупреждение : Этот проект предназначен только для исследовательских и образовательных целей. Использование на чужих системах без разрешения незаконно. Обзор уязвимости Пункт| Содержание ---|--- CVE ID| CVE-2025-55182 Псевдоним| React2Shell Оценка CVSS| 10.0...

Windows-Privilege-Escalation

Windows Privilege Escalation A practical Windows privilege es...

YARA-X 1.21.0

YARA-X is a re-incarnation of YARA, a pattern matching tool designed with malware researchers in mind. This new incarnation intends to be faster, safer and more user-friendly than its predecessor. The ultimate goal of YARA-X is replacing YARA as the default pattern matching tool for malware...

Wordfence Bug Bounty Program Monthly Report – June 2026

In June 2026, the Wordfence Bug Bounty Program received 1066 vulnerability submissions from our growing community of security researchers working to improve the overall security posture of the WordPress ecosystem. These submissions are reviewed, triaged, and processed by the Wordfence Threat...

The Infostealer Incursion: How Stolen Credentials Breach Cloud, Code, and AI Environments

Wiz Research analyzes NordStellar data to map the credentials targeted by infostealer families and assess their potential impact across cloud, code, and AI environments...

mvt v2026.9.21

Mobile Verification Toolkit !IMPORTANT We recently merged the "v3" branch. This introduced breaking changes. If you relied on mvt output in other scripts They might have broken. More details: https://github.com/mvt-project/mvt/issues/757 Mobile Verification Toolkit MVT is a collection of utilitie...

auto-vuln-research

auto-vuln-research Agent harness for high-volume open-sourc...

research-pocs

Research PoCs 2 entries. This index is auto-generated — do no...

Integrating AI Tools Into Research Teams: Productivity Benefits and Risks

AI tools are finding a place in research workflows, particularly for tasks such as transcription, summarization, and qualitative…...

exploitarium

🧪 exploitarium - Your Gateway to Cybersecurity Research ⬇️ D...

teste-exploit-ps5

PSAITO Experimental research project for educational and...

PT-2026-91887

First CVE IDs are in — MITRE assigned 10 CVEs to our research CVE-2026-88557 → 88566. All 10 were found, verified end-to-end, and disclosed first by our AI-driven research pipeline. Every single one ships a full root-cause analysis and a working, reproducible PoC — public since day one, no...

PT-2026-91882

First CVE IDs are in — MITRE assigned 10 CVEs to our research CVE-2026-88557 → 88566. All 10 were found, verified end-to-end, and disclosed first by our AI-driven research pipeline. Every single one ships a full root-cause analysis and a working, reproducible PoC — public since day one, no...