CVE-2025-11953-PoC

설명 React Native Community CLI가 열어 놓는 Metro 개발 서버는 기본적으로 외부 인터페이스에 바인딩됩니다. 이 서버는 OS 명령어 삽입에 취약한 엔드포인트를 노출합니다. 따라서 인증되지 않은 네트워크 공격자가 서버에 POST 요청을 보내 임의의 실행 파일을 실행할 수 있습니다. Windows의 경우 공격자는 완전히 제어되는 인수를 사용하여 임의의 셸 명령을 실행할 수도 있습니다. 영향받는 버전 제품| 심각도| 영향받는 버전| 패치된 버전 ---|---|---|---...

CVE-2026-23744

CVE-2026-23744: @mcpjam/inspector의 인증되지 않은 원격 코드 실행 면책 조항: 이 저장소와 관련 스크립트는 공인된 보안 평가, 침투 테스트, 보안 연구 및 교육적 분석 목적으로만 제공됩니다. 명시적인 서면 동의 없이 시스템을 무단 테스트하는 것은 불법이며 엄격히 금지됩니다. 저자는 본 자료의 오해 또는 오용으로 인한 어떠한 책임도 지지 않습니다. 취약점 개요 속성| 세부 정보 ---|--- CVE ID| CVE-2026-23744 CVSS 점수| 9.8 치명적 취약점 분류| 중요 기능에 대한 인증 누...

CVE-2026-23744-POC

CVE-2026-23744 — MCPJam Inspector 인증되지 않은 RCE MCPJam Inspector -i -p -m 플래그| 설명| 기본값 ---|---|--- -u| 대상 URL| 필수 -i| 리스너 IP LHOST| 필수 -p| 리스너 포트 LPORT| 필수 -m| 페이로드 방법: busybox, bash, python3| busybox 역방향 셸 예제 1단계 — 리스너 시작: nc -lvnp 4444 2단계 — 익스플로잇 실행: bash python3 POC.py -u http://127.0.0.1:6274 ...

CVE-2026-59160

@yeger/turbo-graph (an npm package in the Yeger monorepo) prior to version 2.8.9 exposes an embedded Next.js server on all network interfaces (0.0.0.0:29312 by default) due to a missing hostname argument in .listen() at packages/turbo-graph/src/index.ts:44. The /api/run GET handler (packages/turb...

CVE-2026-9680 MCP Server Exposure via Insecure Default Binding on alibabacloud-rds-openapi-mcp-server

Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default...

CVE-2026-9680 MCP Server Exposure via Insecure Default Binding on alibabacloud-rds-openapi-mcp-server

Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default...

CVE-2026-9680

The CVE concerns alibabacloud-rds-openapi-mcp-server where an MCP endpoint bound to all network interfaces by default exposes MCP tools. Root cause: improper exposure caused by insecure default binding. Impact: remote attackers can access exposed MCP tools via network without authentication? The ...

PYSEC-2026-3517 PraisonAI: Missing Authentication for Critical Function and Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in praisonai

Unauthenticated PraisonAI UI MCP connect endpoint executes attacker-chosen local commands Summary PraisonAI v4.6.48 exposes the PraisonAIUI MCP client management API through the default UI host apps without authentication. A remote unauthenticated client can send POST /api/mcp/connect with a...

CVE-2026-45077

CVE-2026-45077 concerns Symfony’s server:log listener (part of Symfony\Bridge\Monolog) which binds to 0.0.0.0:9911 by default and processes each frame with unserialize(base64_decode($message)) without authentication or an allowed-classes allowlist. This permits any reachable host to submit attack...

GO-2026-5401 Algernon: Auto-refresh SSE event server binds to all interfaces by default on Linux/macOS in github.com/xyproto/algernon

Algernon: Auto-refresh SSE event server binds to all interfaces by default on Linux/macOS in github.com/xyproto/algernon...

PT-2026-61657

Name of the Vulnerable Software and Affected Versions Network-AI versions 5.0.0 through 5.12.1 Description The ApprovalInbox feature, located in lib/approval-inbox.ts, serves as the network interface for the human-in-the-loop Approval Gate used to authorize high-risk operations. The associated HT...

CVE-2026-46430

Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, the SSE event server bound to 0.0.0.0:5553 on Linux/macOS by default because the platform-dependent host default in engine/flags.go:39-46 set host = "" for non-Windows, and utils.JoinHostPort"", ":5553" resolves to ":5553"...

CVE-2026-46430

Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, the SSE event server bound to 0.0.0.0:5553 on Linux/macOS by default because the platform-dependent host default in engine/flags.go:39-46 set host = "" for non-Windows, and utils.JoinHostPort"", ":5553" resolves to ":5553"...

CVE-2026-46430 Algernon: Auto-refresh SSE event server binds to all interfaces by default on Linux/macOS

Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, the SSE event server bound to 0.0.0.0:5553 on Linux/macOS by default because the platform-dependent host default in engine/flags.go:39-46 set host = "" for non-Windows, and utils.JoinHostPort"", ":5553" resolves to ":5553"...

EUVD-2026-31869

Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, the SSE event server bound to 0.0.0.0:5553 on Linux/macOS by default because the platform-dependent host default in engine/flags.go:39-46 set host = "" for non-Windows, and utils.JoinHostPort"", ":5553" resolves to ":5553"...

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

exploit-CVE-2026-23744 MCPJam Inspector is a local-first devel...

Red Hat Keycloak 授权问题漏洞

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. A security vulnerability exists in Red Hat Keycloak that stems from the default ECP binding flow that allows bypassing other authentication...