8 matches found
DevHub-HTB-Walkthrough
DevHub – HTB 워크스루 Medium Linux 머신: DevHub 난이도: Medium OS: Linux 주제: CVE-2026-23744, Chisel Tunneling, Jupyter, Flask API, Root 권한 상승 📌 1. 정찰 root@kitploit: nmap -sC -sV devhub.htb 결과: Port 22 SSH Port 80 HTTP Port 6274 MCPJam Inspector 📌 2. Hosts 파일 수정 echo "10.x.x.x devhub.htb" /etc/hosts 📌 3...
CVE-2026-23744-MCPJAM-RCE-exploit
CVE-2026-23744-MCPJAM-RCE-exploit This Python proof-of-concept targets a vulnerable MCP Model Context Protocol service exposed by the target application. The vulnerability allows an attacker to supply arbitrary server configuration parameters through the /api/mcp/connect endpoint. Affected Endpoi...
CVE-2026-23744
CVE-2026-23744 CVE-2026-23744 RCE While analyzing this vulnerability, I discovered that MCPJam Inspector exposed the /api/mcp/connect endpoint to the network by binding to 0.0.0.0. This endpoint accepts a JSON object containing serverConfig, including the fields command and args. The application...
PoC-CVE-2026-23744
PoC-CVE-2026-23744 Esecuzione di codice remoto su MCPJam Inspector Riferimento https://github.com/MCPJam/inspector/security/advisories/GHSA-232v-j27c-5pp6...
GO-2026-5678 Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
Obot has an authorization bypass in /mcp-connect/id that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
CVE-2026-23744 — MCPJam Unauthenticated Remote Code Execution...
GHSA-VW82-7FV8-R6GP Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server
Summary If you have the MCP Server ID, you can connect to the MCP server even if you don't have permissions to the server. The MCP gateway endpoint /mcp-connect/mcpid does not enforce Access Control Rules ACRs. Any authenticated Obot user who possesses an MCP Server ID can connect to that server...