MCP Atlassian: ENABLED_TOOLS / Toolset authorization bypass

Summary ENABLEDTOOLS and TOOLSETS filters are enforced at tools/list time only. tools/call dispatches from the full unfiltered tool registry 73 tools. Any user with access to the server endpoint that knows a tool name can invoke it directly. Tool names are not secret since mcp-atlassian is open...

CVE-2026-77257

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, HTTP-exposed Jira and Confluence upload tools pass a caller-provided filepath to local file operations without restricting it to the workspace. A remote MCP caller with tool access ca...

CVE-2026-77243

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, ENABLEDTOOLS and TOOLSETS are applied when tools are listed but are not rechecked when a tools/call request is dispatched. A client that knows a hidden tool name can directly invoke...

CVE-2026-77257

The MCP Atlassian Model Context Protocol server for Confluence and Jira is vulnerable to arbitrary file path traversal in its HTTP-exposed upload tools prior to version 0.22.0 . The root cause is that the server passes a caller-provided file_path to local file operations without restricting acces...

CVE-2026-77243

The MCP Atlassian Model Context Protocol server for Confluence and Jira is vulnerable to an authorization bypass in versions prior to 0.22.0 . The root cause is that while ENABLED_TOOLS and TOOLSETS are applied during tool listing, they are not rechecked when a tools/call request is dispatched. T...

EUVD-2026-84626

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, ENABLEDTOOLS and TOOLSETS are applied when tools are listed but are not rechecked when a tools/call request is dispatched. A client that knows a hidden tool name can directly invoke...

CVE-2026-77243 MCP Atlassian: ENABLED_TOOLS / Toolset authorization bypass

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, ENABLEDTOOLS and TOOLSETS are applied when tools are listed but are not rechecked when a tools/call request is dispatched. A client that knows a hidden tool name can directly invoke...

CVE-2026-77243 MCP Atlassian: ENABLED_TOOLS / Toolset authorization bypass

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, ENABLEDTOOLS and TOOLSETS are applied when tools are listed but are not rechecked when a tools/call request is dispatched. A client that knows a hidden tool name can directly invoke...

CVE-2026-80144

Lantronix SLC8000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers to execute arbitrary shell commands as root by exploiting an undocumented mfc...

CVE-2023-32571-POC

Dynamic LinqインジェクションからRCEへ - CVE-2023-32571 Dynamic LinqインジェクションからRCE CVE-2023-32571 について 最近、NCC GroupのメンバーがDynamic Linqの脆弱性を発見しました。これにより、攻撃者はLinQインジェクションを通じてC関数を呼び出すことができ、RCEを獲得することが可能になります。 Dynamic Linqに関するRCE報告にもかかわらず、NCC Groupのメンバーは何らかの理由でコマンド実行用のPOCを公開していませんでした。 POC NCC...

diaphora

δiaphora 설치 Hex-Rays 플러그인 매니저로 설치: root@kitploit: hcli plugin install https://github.com/joxeankoret/diaphora/archive/refs/tags/3.4.2.zip 수동 설치는 아래에 나와 있습니다. Diaphoraδιαφορά, 그리스어로 '차이'를 뜻함 버전 3.4는 현재2026년까지 사용 가능한 가장 진보된 프로그램 디핑 도구IDA 플러그인으로 동작입니다. SyScan 2015에서 처음 공개된 이후 지금까지 활발히 유지보수되고 있습니다...

moukthar

Moukthar 안드로이드용 원격 관리 도구 데모 기능 권한 우회 안드로이드 12 이하 키로거 알림 리스너 SMS 리스너 통화 녹음 이미지 캡처 및 스크린샷 비디오 녹화 지속성 연락처 읽기 및 쓰기 설치된 애플리케이션 목록 파일 다운로드 및 업로드 기기 위치 확인 설치 리포지토리 클론 root@kitploit: git clone https://github.com/Tomiwa-Ot/moukthar.git PHP, Composer, MySQL, php-mysql 드라이버, Apache2, a2enmod 설치 서버 파일을...

EUVD-2026-84519

Lantronix SLC8000 before firmware v9.7.0.3, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers with the services permission to execute arbitrary shell commands as root by...

EUVD-2026-84517

Lantronix SLC8000 before firmware v9.7.0.3, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers with the services permission to execute arbitrary shell commands as root by...

CVE-2026-80146

Lantronix SLC8000, EMG8500, EMG7500, SLB882, SLCx-03, and SLCx-02 are affected by a stack-based buffer overflow in an undocumented mfc eeprom read command that copies unbounded user input into a bounded stack buffer before passing it to a system() call. An authenticated attacker (any user via the...

EUVD-2026-84506

Lantronix SLC8000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers to execute arbitrary shell commands as root by exploiting an undocumented mfc...

exrop

Exrop Automatic ROP chain generator for x86-64 binaries, powered by Triton symbolic execution. Features Set registers to constants or other registers rdi=0x41414141, rdi=rax Write to memory constant and register-based addresses/values Write strings/bytes to memory Function calls with mixed...

MSRKit

MSRKit 脆弱なドライバ（AmdTools64.sys）の wrmsr プリミティブを介した ROP チェーンによって、カーネル関数を呼び出し 、ドライバをマッピング するためのツール。 仕組み 1. NtLoadDriver を介して AmdTools64.sys をロードする（シンボリックリンクが利用できない場合は、PnP devnode + GUID ベースのデバイスインターフェースにフォールバックする） 2. ドライバの MSR 読み取り IOCTL（0xFFF02804）を通じて IA32LSTAR を読み取る 3. ntoskrnl.exe をスキャンして ROP...

pe-sieve

Intro PE-sieve is a tool that helps to detect malware running on the system, as well as to collect the potentially malicious material for further analysis. Recognizes and dumps variety of implants within the scanned process: replaced/injected PEs, shellcodes, hooks, and other in-memory patches...

CVE-2025-4126

POC-CVE-2025-4126 スマートコントラクトのリエントランシー攻撃の脆弱性の検証 スマートコントラクトのリエントランシー攻撃PoC このリポジトリには、Ethereumスマートコントラクトにおけるリエントランシー攻撃 の脆弱性を示す概念実証（PoC）が含まれています。このPoCには、脆弱なスマートコントラクト、攻撃者コントラクト、およびローカルテスト環境で攻撃を再現するための手順が含まれています。 目次 概要 脆弱性の説明 PoCのセットアップ PoCの実行 ライセンス 概要...