reconmap

Reconmap Платформа для управления тестированием на проникновение, автоматизации и создания отчётов Reconmap — это платформа с открытым исходным кодом для оценки уязвимостей и тестирования на проникновение, созданная для поддержки специалистов по безопасности на всём протяжении жизненного цикла...

jadx-ai-mcp

JADX-AI-MCP Zin MCP Suite의 일부 ⚡ Claude와 같은 LLM을 사용해 Android APK를 분석하기 위해 MCP를 통해 LLM과 통신하도록 구축된 완전 자동화된 MCP 서버 + JADX 플러그인 — 취약점 발견, APK 분석, 리버스 엔지니어링을 손쉽게 수행하세요. ⭐ 기여자 훌륭한 기여를 해주신 놀라운 분들께 감사드립니다 ⭐ ljt270864457 | p0px | bx33661 | Haicaj...

lisa.py

Интеграция LLDB MCP Этот проект предоставляет интеграцию с протоколом модель-контекст MCP для LLDB, позволяя AI-ассистентам, таким как Claude, взаимодействовать с вашими сеансами отладки через стандартизированный интерфейс. Обзор Интеграция состоит из двух основных компонентов: 1. server.py —...

TS_LLMLib

tsllmlib - TrustedSec LLM ライブラリ TrustedSec LLM ライブラリ は、ツールの使用をサポートするローカルLLMと対話するためのPythonライブラリです。ローカルLLMエンドポイントとMCP（Model Context Protocol）統合を活用することで、従来はフロンティアモデルでのみ可能だった大規模なワークフローを実行できます。 特徴 ローカルLLMサポート : OpenAI互換のAPIエンドポイントに接続するか、ローカルLLMサーバーを使用します MCP統合 : RPCおよびSSEプロトコルの両方に対する完全なModel Context...

OWASP-WSTG-Rag

OWASP WSTG RAG OWASP 웹 보안 테스트 가이드WSTG를 벡터 데이터베이스에 색인화하는 검색 증강 생성RAG 시스템으로, REST API와 MCPModel Context Protocol를 통해 보안 테스트 방법론에 즉시 접근할 수 있으며 Claude Code와 통합됩니다. 특징 완전한 WSTG 범위 - 12개 WSTG 테스트 카테고리 전체가 색인화되어 검색 가능 의미 기반 검색 - 자연어 질의를 사용하여 관련 테스트 방법론을 찾을 수 있음 MCP 통합 - Claude Code와 직접 통합되어 AI 지원 침투...

CVE-2026-7589

A vulnerability was determined in ghantakiran splunk-mcp-integration up to 0b86b09d5e5adf0433acd43c975951224613a1a6. Impacted is the function createcsvexport of the file services/csv-export-service/app/api/v1/endpoints/csvexport.py of the component CSV Export. This manipulation of the argument...

CVE-2026-7589 ghantakiran splunk-mcp-integration CSV Export csv_export.py create_csv_export path traversal

A vulnerability was determined in ghantakiran splunk-mcp-integration up to 0b86b09d5e5adf0433acd43c975951224613a1a6. Impacted is the function createcsvexport of the file services/csv-export-service/app/api/v1/endpoints/csvexport.py of the component CSV Export. This manipulation of the argument...

CVE-2026-7589 ghantakiran splunk-mcp-integration CSV Export csv_export.py create_csv_export path traversal

A vulnerability was determined in ghantakiran splunk-mcp-integration up to 0b86b09d5e5adf0433acd43c975951224613a1a6. Impacted is the function createcsvexport of the file services/csv-export-service/app/api/v1/endpoints/csvexport.py of the component CSV Export. This manipulation of the argument...

CVE-2026-7589

The CVE concerns ghantakiran splunk-mcp-integration (up to commit 0b86b09d5e5adf0433acd43c975951224613a1a6). Affects the function create_csv_export in services/csv-export-service/app/api/v1/endpoints/csv_export.py (CSV Export). Root cause: manipulation of the job_name argument leads to path trave...

PT-2026-36533

A vulnerability was determined in ghantakiran splunk-mcp-integration up to 0b86b09d5e5adf0433acd43c975951224613a1a6. Impacted is the function create csv export of the file services/csv-export-service/app/api/v1/endpoints/csv export.py of the component CSV Export. This manipulation of the argument...

Splunk MCP Integration 路径遍历漏洞

Splunk MCP Integration is a natural language interactive Splunk data analytics integration tool from the individual developer AI-Ninja. Splunk MCP Integration has a path traversal vulnerability that originates in the createcsvexport function in the file...

PraisonAI Vulnerable to Sensitive Environment Variable Exposure via Untrusted MCP Subprocess Execution

PraisonAI’s MCP Model Context Protocol integration allows spawning background servers via stdio using user-supplied command strings e.g., MCP"npx -y @smithery/cli ...". These commands are executed through Python’s subprocess module. By default, the implementation forwards the entire parent proces...

Nginx UI 安全漏洞

Nginx UI is a web interface for Nginx developed by Jacky. Versions of Nginx UI 2.3.5 and earlier contained security vulnerabilities. These vulnerabilities stemmed from the MCP integration, where the /mcmessage endpoint only applied an IP white list, and the default white list was empty. This...

Malicious code in @zapier/mcp-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b2f7745be8592869c863671add1d5a04c1d33f7a2c23a54fde611a5e021226 The package @zapier/mcp-integration was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190918 Malicious code in @zapier/mcp-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b2f7745be8592869c863671add1d5a04c1d33f7a2c23a54fde611a5e021226 The package @zapier/mcp-integration was found to contain malicious code. Source: google-open-source-security...

This Year in Spring - December 31st, 2024

Hi Spring fans! Happy New Year! And welcome to another installment of This Year in Spring! The year that was... I write this edition from a desk overlooking the beautiful jungle of Martinique, a beautiful island nation in the French Caribbean. I’m sipping some rhum martinique , enjoying the...