UAP-protocol

██╗ ██╗ █████╗ ██████╗ ██║ ██║██╔══██╗██╔══██╗ ██║ ██║███████║██████╔╝ ██║ ██║██╔══██║██╔═══╝ ╚██████╔╝██║ ██║██║ ╚═════╝ ╚═╝ ╚═╝╚═╝ Universal Agent Protocol 一个统一的、安全至上的线缆协议，用于工具访问、代理协调和结构化RPC。 旨在修复CVE-2025-49596以及MCP在架构上遗留的工具投毒和沙箱逃逸漏洞。 30秒快速开始 git clone https://github.com/RajSidwadkar/UAP-protoc...

trust-boundary-ctf

🐘 信任边界：MCP 会话隔离 CTF 控制台显示 会话活跃 。 每次工具调用都成功。 管理员的 OAuth 令牌出现在每个响应中。 Trust Boundary 是一个基于浏览器的 CTF 实验室，围绕本地运行的 MCP 服务器中真实的会话隔离缺陷而构建。该漏洞并非模拟——它会在运行进程中真实执行。三个 Flag。仅需 DevTools。 攻击 一个共享的可变上下文对象。管理员凭据在启动时设置。用户请求会部分覆盖它——但绝不会清除真正关键的内容。 flowchart LR subgraph startup"🚀 Server Startup" AAdmin Agent A...

Critical Vulnerability in Anthropic's MCP Exposes Developer Machines to Remote Exploits

Cybersecurity researchers have discovered a critical security vulnerability in artificial intelligence AI company Anthropic's Model Context Protocol MCP Inspector project that could result in remote code execution RCE and allow an attacker to gain complete access to the hosts. The vulnerability,...

@cyanheads/git-mcp-server (>=2.0.10, <=2.1.0), @dsazz/mcp-confluence (0.2.0) +34 more potentially affected by CVE-2025-49596 via @modelcontextprotocol/inspector (>=0.2.7, <=0.13.0)

@modelcontextprotocol/inspector NPM version =0.2.7, =2.0.10, =1.0.1, =0.0.0-alpha.0, =1.0.0, =0.1.0, =0.1.2 and more Source cves: CVE-2025-49596 Source advisory: OSV:GHSA-7F8R-222P-6F5G...

CVE-2025-49596

creationtimestamp| type| source ---|---|--- 2025-06-13 20:35:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18339 2025-06-13 21:00:48+00:00| published-proof-of-concept| Telegram/YLjaHgOWqHyGE2pMNrZj7KRcmqTuBmFaJ1673d7IeXnQg 2025-06-13 21:22:16+00:00| seen|...

CVE-2025-49596 MCP Inspector proxy server lacks authentication between the Inspector client and proxy

The MCP inspector is a developer tool for testing and debugging MCP servers. Versions of MCP Inspector below 0.14.1 are vulnerable to remote code execution due to lack of authentication between the Inspector client and proxy, allowing unauthenticated requests to launch MCP commands over stdio...