8 matches found
hexstrike-ai
HexStrike AI MCP Agents v6.0 AI 기반 MCP 사이버보안 자동화 플랫폼 150개 이상의 보안 도구와 12개 이상의 자율 AI 에이전트를 갖춘 고급 AI 기반 침투 테스트 MCP 프레임워크 📋 새로운 기능 • 🏗️ 아키텍처 • 🚀 설치 • 🛠️ 기능 • 🤖 AI 에이전트 • 📡 API 참조 소셜 계정 팔로우하기 아키텍처 개요 HexStrike AI MCP v6.0은 자율 AI 에이전트, 지능형 의사 결정 및 취약점 인텔리전스를 갖춘 멀티 에이전트 아키텍처를 제공합니다.mermaid %%init:...
CVE-2025-35028
By providing a command-line argument starting with a semi-colon ; to an API endpoint created by the EnhancedCommandExecutor class of the HexStrike AI MCP server, the resultant composed command is executed directly in the context of the MCP server’s normal privilege; typically, this is root. There...
CVE-2025-35028 HexStrike AI MCP Server Command Injection
By providing a command-line argument starting with a semi-colon ; to an API endpoint created by the EnhancedCommandExecutor class of the HexStrike AI MCP server, the resultant composed command is executed directly in the context of the MCP server’s normal privilege; typically, this is root. There...
CVE-2025-35028 HexStrike AI MCP Server Command Injection
By providing a command-line argument starting with a semi-colon ; to an API endpoint created by the EnhancedCommandExecutor class of the HexStrike AI MCP server, the resultant composed command is executed directly in the context of the MCP server’s normal privilege; typically, this is root. There...
CVE-2025-35028
HexStrike AI MCP Server is affected by a command-injection vulnerability in the EnhancedCommandExecutor API endpoint. A command-line argument starting with a semicolon (;) can cause a composed command to run with the MCP server’s privileges (typically root) because default configurations do not s...
PT-2025-48397
Name of the Vulnerable Software and Affected Versions HexStrike AI MCP Server versions prior to commit 2f3a5512 Description The HexStrike AI MCP Server is susceptible to a command injection issue. By supplying a command-line argument beginning with a semicolon ; to an API endpoint created by the...
HexStrike AI MCP Agents 安全漏洞
HexStrike AI MCP Agents is an MCP server by the individual developer Muhammad Osama. HexStrike AI MCP Agents suffers from a security vulnerability that stems from not cleaning up command line parameters, which could lead to the execution of arbitrary code...
