CVE-2026-102878 mcp-chrome-bridge through 1.0.31 CORS Origin Bypass

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script...

CVE-2026-102878 mcp-chrome-bridge through 1.0.31 CORS Origin Bypass

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script...

EUVD-2026-89413

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script...

CVE-2026-97615

A flaw was found in the Linux kernel's network bridge subsystem, which can lead to a Denial of Service DoS due to list corruption. When Connectivity Fault Management CFM or Media Redundancy Protocol MRP handlers are enabled across multiple network bridges, a shared data structure is improperly...

CVE-2026-97436

A flaw was found in the Linux kernel's dpaa2-switch driver. When multiple network bridges are configured across ports on the same switch device, removing a port from a bridge fails to release its Forwarding Database FDB, which tracks network destination addresses. A privileged user modifying...

kernel: net: bridge: stop fast-leave after deleting a port group

A flaw was found in the Linux kernel's network bridge module. When handling multicast fast-leave, a vulnerability exists where the system may attempt to access a port group after it has been deleted. This can occur if multicast-to-unicast was previously enabled and then disabled, leading to a sta...

CVE-2026-34197

CVE-2026-34197 - Apache ActiveMQ Jolokia 远程代码执行（RCE） CVE-2026-34197 是一个影响 Apache ActiveMQ Classic 的高严重性远程代码执行（RCE）漏洞。该问题存在于 Jolokia JMX-HTTP 桥接器中，该桥接器通过 /api/jolokia/ 端点以 HTTP 方式暴露管理操作。 默认的 Jolokia 访问策略允许经过身份验证的用户对 ActiveMQ MBean 调用管理操作。某些代理管理方法接受用户可控的发现 URI。精心构造的 URI 可导致 ActiveMQ 在代理配置验证之前加载远程...

ROS-20260929-73-0044

The vulnerability of the ebtsnattg function in the net/bridge/netfilter/ebtsnat.c module, which implements networking functions in the Linux kernel, is related to the issue of data being written outside of the buffer. Exploiting this vulnerability could allow an attacker to compromise the...

SUSE CVE-2026-97615

In the Linux kernel, the following vulnerability has been resolved: net: bridge: use option bits for CFM/MRP frame handlers CFM and MRP register a global brframetype whose hlistnode is linked into the per-bridge frametypelist when the first MEP/MRP instance is created. Enabling the protocol on...

CVE-2026-98026

A flaw was found in the Linux kernel's network bridge subsystem. An attacker could exploit this vulnerability to cause a Denial of Service DoS or system crash through a use-after-free condition. This issue occurs during multicast port group removal, where the kernel immediately frees data...

CVE-2026-43499-T807D

T807D 最终产物—源码一一对应恢复包 生成日期：2026-08-08 结论 本目录已经整理出当前项目中能够找回的完整 popsicle 源码树、必要头文件、嵌入式 su 载荷、生产二进制和运行脚本。 必须区分： 1. r562 SO 和 r557 helper 的生产二进制已完整保留，哈希可复核。 2. 项目没有保存这两个生产二进制编译前的旧源码快照、目标文件或带 DWARF 的完整构建产物。因此，当前源码不能被诚实地标记为“逐字节就是当时编译生产二进制的源码”。 3. 当前保存的源码是 Kit 中唯一完整的 popsicle 源码树，也是 2026-08-05 审查后的维护基线。...

CVE-2026-34197

CVE-2026-34197 描述 Apache ActiveMQ Broker、Apache ActiveMQ 中存在不当输入验证、代码生成控制不当（'代码注入'）漏洞。Apache ActiveMQ Classic 在 Web 控制台的 /api/jolokia/ 路径下暴露了 Jolokia JMX-HTTP 桥接。默认的 Jolokia 访问策略允许对所有 ActiveMQ MBean（org.apache.activemq:）执行 exec 操作，包括 BrokerService.addNetworkConnectorString 和...

ida-pro-mcp

IDA Pro MCP ⚠️ Archived — superseded by the official Hex-Rays IDA MCP server This project is no longer maintained. On 2026-09-27 Hex-Rays SA released the Official IDA MCP Server and IDA Nexus. Development stopped the same day at 1.0.0a4. For current use, install theirs: uvx ida-hcli mcp install. I...

PayloadAutomation

什么是 Payload Automation？ 现在可作为 PyPi 包获取：https://pypi.org/project/payload-automation/ Payload Automation 是一组 Python 类，用作 Sleep 和 Python 之间的桥梁，可用于帮助自动化载荷开发、测试、OPSEC 检查和部署，配合 Cobalt Strike 或你能想到的任何其他用途。 请查看 examples 文件夹中的预置脚本，以利用所提供的功能。 包含的库： Striker：一组用于与 Cobalt Strike 交互并执行通常只能通过 Sleep/GUI 访问的功能的函数...

CVE-2026-100868

Penpot before 2.18.0 binds the MCP server plugin WebSocket bridge to all network interfaces without authentication in single-user mode. Unauthenticated attackers on adjacent networks can connect to the WebSocket port to impersonate the Penpot browser plugin, intercept task payloads, and return...

CVE-2026-100868

Versions of Penpot prior to 2.18.0 are vulnerable to unauthenticated access via the MCP server plugin WebSocket bridge . In single-user mode, the bridge binds to all network interfaces without authentication, allowing unauthenticated attackers on adjacent networks to connect to the WebSocket port...

EUVD-2026-87940

Penpot before 2.18.0 binds the MCP server plugin WebSocket bridge to all network interfaces without authentication in single-user mode. Unauthenticated attackers on adjacent networks can connect to the WebSocket port to impersonate the Penpot browser plugin, intercept task payloads, and return...

CVE-2026-100868 Penpot before 2.18.0 Unauthenticated WebSocket Access via MCP Bridge

Penpot before 2.18.0 binds the MCP server plugin WebSocket bridge to all network interfaces without authentication in single-user mode. Unauthenticated attackers on adjacent networks can connect to the WebSocket port to impersonate the Penpot browser plugin, intercept task payloads, and return...

CVE-2026-100868 Penpot before 2.18.0 Unauthenticated WebSocket Access via MCP Bridge

Penpot before 2.18.0 binds the MCP server plugin WebSocket bridge to all network interfaces without authentication in single-user mode. Unauthenticated attackers on adjacent networks can connect to the WebSocket port to impersonate the Penpot browser plugin, intercept task payloads, and return...

CVE-2026-100868 Penpot before 2.18.0 Unauthenticated WebSocket Access via MCP Bridge

Penpot before 2.18.0 binds the MCP server plugin WebSocket bridge to all network interfaces without authentication in single-user mode. Unauthenticated attackers on adjacent networks can connect to the WebSocket port to impersonate the Penpot browser plugin, intercept task payloads, and return...