LLM-MCP-Security-Field-Guide

🛡️ AI 安全领域指南 — LLM + MCP 安全 面向 LLM 应用和模型上下文协议（MCP）部署的最全面、最新、以实践者为中心的安全参考。 涵盖真实 CVE、实时攻击模式、OWASP 框架、红队工具和可操作检查清单 — 每周更新。 为何需要本指南 AI 安全格局在 2025–2026 年间发生了剧变： 🔴 492 个 MCP 服务器 公开暴露且无身份认证（Trend Micro，2026） 🔴 CVE-2025-6514 通过 mcp-remote OAuth 代理危及 437,000+ 个开发者环境 🔴 在 ClawHub 代理注册表中确认了 1,184 个恶意技能 （Antiy...

CVE-2026-91843 Stack overflow in login process to the Security Management and Log Servers

A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges...

CVE-2026-91843

CheckPoint Security Management and Log Servers are affected by a stack overflow in the unauthenticated login process , which may allow a remote attacker to execute arbitrary code with root privileges . The vulnerability is rated CVSS 9.8 (Critical) with a network attack vector requiring no privil...

skills

SpecterOps Skills Reusable agent skills, plugins, and agent definitions for SpecterOps. Use With Codex Each plugin includes a Codex manifest at .codex-plugin/plugin.json. root@kitploit: codex plugin marketplace add /Users//Projects/skills or codex plugin marketplace add SpecterOps/skills Then ope...

mcp-server-attestation

StudioMeyer MCP Stack 的一部分 — 在 Mallorca 构建 🌴 · 如果使用请 ⭐ mcp-server-attestation Layer-2 供应链加固，用于 Model Context Protocol 服务器。Ed25519 签名的工具清单、运行时 spawn 认证、默认拒绝参数清理器。 直接回应： OX Security 市场投毒，2026 年 4 月 — 11 个 MCP 注册中心中有 9 个接受了恶意服务器。Anthropic 的公开立场：“预期行为”。 CVE-2025-69256 — 通过 childprocess.exec 命令注入的...

CVE-2023-44487

HTTP/2 Rapid Reset: CVE-2023-44487 Descripción Este repositorio contiene código de prueba de concepto PoC para la vulnerabilidad HTTP/2 Rapid Reset identificada como CVE-2023-44487. Resumen de la vulnerabilidad ID de CVE : CVE-2023-44487 Impacto : Denegación de servicio DoS Protocolos afectados :...

regresshion-check

regresshion-check regresshion-check 是一个用 Rust 编写的 CLI 工具，用于检查 SSH 服务器是否存在 CVE-2024-6387 漏洞。它可以扫描单个 IP 或多个 IP/CIDR（以换行符分隔的文件提供）。对于检测为易受攻击的 IP，会包含反向 DNS 查找结果和版本字符串。 （README 中列出的 IP 仅作示例，请勿使用） 先决条件 已安装 Rust 和 Cargo。你可以通过 rustup 安装 Rust 和 Cargo。 构建应用程序 1. 克隆仓库： root@kitploit: git clone...

CVE_2023_44487-Rapid_Reset

Herramienta de Prueba de Rapid Reset HTTP/2 CVE-2023-44487 - Edición Mejorada Una herramienta integral de pruebas en Python para CVE-2023-44487 , la vulnerabilidad de Rapid Reset en HTTP/2. Esta versión mejorada proporciona control granular sobre los parámetros de prueba, múltiples patrones de...

CVE-2026-91843 - Stack overflow in login process to the Security Management and Log Servers

Symptoms - Issue: A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges. This issue received the ID CVE-2026-91843 and a CVSS score of 9.8. Affected Products: Security Management Server, Multi-Domain Security Management...

CVE-2026-54450 ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway

ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol MCP servers. Prior to 0.29.1, networking.IsPrivateIP in pkg/networking/utilities.go omits the IPv6 NAT64 prefixes 64:ff9b::/96 and 64:ff9b:1::/48, so NAT64 addresses embedding private, loopback, or...

CVE-2024-27316

CVE-2024-27316 Decidí llamar a esta vulnerabilidad específicamente "CVE-2024-27316" ya que la he probado contra esta vulnerabilidad. El fallo subyacente afecta a otros CVE, así que pensé en mencionarlos con la esperanza de que otros puedan probar y modificar este PoC : Este PoC actualmente solo...

CVE-2026-84445

CVE-2026-84445 affects gRPC-Go prior to versions 1.82.2 and 1.83.2 . Servers created via xds.NewGRPCServer() accept RPCs containing neither the :authority nor Host header. The RouteAndProcess function in internal/xds/server/routing.go then assumes an authority value exists and indexes an empty sl...

Astra Linux – Vulnerability in edk2

EDK2’s Network Package is vulnerable to a buffer overflow vulnerability when processing the DNS Server option from a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality, Integrity, and/or...

Astra Linux – Vulnerability in curl

When the curl command is used to retrieve content using the Metalink feature, and a user name and password are used to download the Metalink XML file, those same credentials are then passed to each server from which the curl command will attempt to download or retrieve the content. This often...

enumpossible

enumpossible 检查SSH服务器列表，看是否允许密码认证，并验证已识别的服务器中是否存在SSH用户枚举漏洞（CVE-2018-15473）。 使用由@LeapSecurity提供的略微修改版https://www.exploit-db.com/exploits/45939来检查CVE-2018-15473。 screenshot 使用方法： root@kitploit: git clone https://github.com/securemode/enumpossible.git 接收一个服务器列表，格式为 ip:port： root@kitploit:...

CVE-2025-23419

🔐 TLS 会话重用漏洞测试工具 $ 由 XIT 提供 一款基于 Python 的工具，用于测试可能因服务器配置错误而导致认证绕过的潜在 TLS 会话重用漏洞。 ⚠️ 免责声明 此工具仅供教育和授权的安全测试目的 使用。 未经适当许可，请勿在系统上使用。 📌 描述 此脚本尝试模拟 TLS 会话重用场景： 1. 连接到需要 客户端证书认证 的服务器 2. 建立 TLS 会话 3. 重用同一会话访问另一台服务器（相同 IP/端口） 4. 检查是否绕过了认证 🚀 功能特性 支持客户端证书的自定义 TLS 适配器 会话重用测试 简单的 CLI 接口 轻量且快速 🛠️ 环境要求 Python 3.x...

czds

CZDS ¿Qué es CZDS? Cada dominio de nivel superior TLD es mantenido por un operador de registro, quien también gestiona una lista disponible públicamente de dominios de segundo nivel SLD y los detalles necesarios para resolver esos nombres de dominio a direcciones de Protocolo de Internet IP. Los...

CVE-2026-87015 Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.27 until 0.11.1, backend/openwebui/utils/tools.py captured a cookie jar from the enclosing connection loop instead of binding it to each external tool callable. When multiple tool servers were attached...

CVE-2026-87015 Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.27 until 0.11.1, backend/openwebui/utils/tools.py captured a cookie jar from the enclosing connection loop instead of binding it to each external tool callable. When multiple tool servers were attached...

CVE-2026-87015 Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.27 until 0.11.1, backend/openwebui/utils/tools.py captured a cookie jar from the enclosing connection loop instead of binding it to each external tool callable. When multiple tool servers were attached...