agent-opfor

Open-source adversary emulation for AI agents, LLM apps, and MCP servers. Test your AI like a real attacker would — from your CLI, your IDE, or a browser extension that anyone on your team can use. Website · Docs · GitHub · ·...

agent-scan

Snyk Agent Scan Discover and scan agent components on your machine for prompt injections and vulnerabilities including agents, MCP servers, skills. Note: CLI output is experimental and subject to change Agent Scan v0.5.x planned for deprecation The raw output of this CLI — including issue codes,...

pkgxray

pkgxray — npm 패키지, MCP 서버, AI 에이전트를 위한 설치 전 보안 npm 패키지나 MCP 서버를 설치하거나 연결하기 전에 검사하여 결정적이고 증거 기반의 SAFE, REVIEW, BLOCK 판정을 받으세요. 로컬, 제로 의존성 정적 분석 — 일반 스캔은 패키지 코드를 절대 실행하지 않습니다...

mcp-xray

MCP X-Ray Обзор MCP X-Ray — это унифицированное решение с открытым исходным кодом для сканирования безопасности и тестирования на проникновение серверов Model Context Protocol MCP. Оно генерирует готовые к использованию отчёты SARIF для бесшовной интеграции с инструментами безопасности и...

aimap

AIMap 노출된 AI 에이전트 인프라를 위한 인터넷 규모 탐지 및 보안 테스트 플랫폼. AIMap은 공개적으로 노출된 AI 엔드포인트MCP 서버, Ollama 인스턴스, vLLM/LiteLLM 프록시, LangServe 체인, Gradio 앱, ComfyUI 노드 등를 찾고, 지문을 식별하며, 보안 테스트를 수행합니다. Shodan과 유사하지만, AI 에이전트 공격 표면에 특화되어 있습니다. Bishop Fox에서 제작했습니다. 경고 이 도구는 공인된 침투 테스트 및 보안 연구 목적으로만 사용해야 합니다. 소유권이 있거나...

vulnerable-mcp-servers-lab

취약한 MCP 서버 랩 이 저장소는 의도적으로 취약하게 만든 Model Context Protocol MCP 서버로컬 및 원격 구현을 포함합니다. 각 서버는 자체 폴더에 있으며 기능 , 실행 방법 , 취약점 시연/공격 방법 에 대한 자세한 내용이 포함된 전용 README.md 파일을 제공합니다. 통제된 랩 환경 외부에서 실행하지 마십시오. 이 저장소의 용도 일반적인 MCP 서버 및 도구 통합 실패 모드에 대한 보안 교육/연구. 취약한 MCP 서버가 데이터 노출, 명령어 삽입, 공급망 손상, 코드 실행으로 이어질 수 있는 방법에...

CVE

CVE一覧表 CVE番号| 種別| 企業/製品| 説明| 記事リンク| リポジトリリンク ---|---|---|---|---|--- CVE-2026-9680| SQLi| Alibaba RDS MCP Servers| TBA| TBA| TBA CVE-2026-50335| LPE| Windows July 2026| TBA| TBA| TBA GHSA-73cv-556c-w3g6| SQLi| Apache Pinot MCP 3.1.0| 外部バインドされたMCPサーバーでのサニタイズ欠如により、SQLインジェクションが発生する可能性があります。|...

LLM-MCP-Security-Field-Guide

🛡️ Полевое руководство по безопасности ИИ — Безопасность LLM и MCP Самое полное, актуальное и практическое руководство по безопасности для приложений LLM и развертываний Model Context Protocol MCP. Охватывает реальные CVE, живые шаблоны атак, фреймворки OWASP, инструменты red teaming и действенные...

skills

SpecterOps Skills SpecterOps向けの再利用可能なエージェントスキル、プラグイン、およびエージェント定義。 Codexでの使用方法 各プラグインには、.codex-plugin/plugin.jsonにCodexマニフェストが含まれています。bash codex plugin marketplace add /Users//Projects/skills or codex plugin marketplace add SpecterOps/skills root@kitploit: 次にCodexを開き、/pluginsからインストールします。 Codex...

mcp-server-attestation

StudioMeyer MCP Stackの一部 — マヨルカ島で開発 🌴 · 使用したら ⭐ をお願いします mcp-server-attestation Model Context Protocolサーバーのためのレイヤー2サプライチェーンハードニング。Ed25519署名されたツールマニフェスト、ランタイムspawnアテステーション、デフォルト拒否引数サニタイザー。 以下の問題への直接的な対応: OX Securityのマーケットプレイス汚染、2026年4月 — 11のMCPレジストリのうち9が悪意のあるサーバーを受け入れました。Anthropicの公開見解: 「期待された動作」...

rbinmcp

rbinmcp - Dado de baja Este repositorio ha sido dado de baja y dividido en servidores MCP separados y mantenibles: r2 backend - github.com/kirkderp/rbinr2 Ghidra backend - github.com/kirkderp/rbinghidra ILSpy .NET backend - github.com/kirkderp/rbinilspy Todo el código y los crates han sido...

agent-scan v0.6.1

Snyk Agent Scan Discover and scan agent components on your machine for prompt injections and vulnerabilities including agents, MCP servers, skills. Note: CLI output is experimental and subject to change Agent Scan v0.5.x planned for deprecation The raw output of this CLI — including issue codes,...

EUVD-2026-67022

The mcp-router CLI served its MCP aggregator on every interface and enforced authentication only when the operator asked for it. The serve command in apps/cli/src/commands/serve.ts defaulted its host to the all-interfaces address on a fixed port, and required a token only when the corresponding...

CVE-2026-71424

CVE-2026-71424 is a critical cross-user OAuth token leak in Onyx , an open-source AI platform. The GET /api/mcp/servers and GET /api/mcp/servers/persona/{persona_id} endpoints expose another user's OAuth Authorization header. The root cause is that OnyxTokenStorage.set_tokens and OnyxTokenStorage...

CVE-2026-71424 Onyx: Cross-user OAuth-token leak via /api/mcp/servers* for per-user MCP servers

Onyx is an open-source AI platform. Prior to 3.1.10, 3.2.14, and 4.0.0, Onyx's GET /api/mcp/servers and GET /api/mcp/servers/persona/personaid endpoints expose another user's OAuth Authorization header because OnyxTokenStorage.settokens and OnyxTokenStorage.setclientinfo in...

CVE-2026-19770

A vulnerability was identified in feedmob fm-mcp-servers 0.0.3. Affected by this vulnerability is the function downloadReport of the file src/smadex-reporting/src/index.ts of the component Download Endpoint. The manipulation of the argument downloadUrl leads to server-side request forgery. The...

CVE-2026-19770 feedmob fm-mcp-servers Download Endpoint index.ts downloadReport server-side request forgery

A vulnerability was identified in feedmob fm-mcp-servers 0.0.3. Affected by this vulnerability is the function downloadReport of the file src/smadex-reporting/src/index.ts of the component Download Endpoint. The manipulation of the argument downloadUrl leads to server-side request forgery. The...

CVE-2026-19770

The CVE-2026-19770 entry affects feedmob fm-mcp-servers 0.0.3, specifically the Download Endpoint’s Download Report function (src/smadex-reporting/src/index.ts). The vulnerability arises from manipulation of the downloadUrl argument, enabling server-side request forgery (SSRF). Exploitation is de...

EUVD-2026-58563

A vulnerability was identified in feedmob fm-mcp-servers 0.0.3. Affected by this vulnerability is the function downloadReport of the file src/smadex-reporting/src/index.ts of the component Download Endpoint. The manipulation of the argument downloadUrl leads to server-side request forgery. The...

CVE-2026-19770

A vulnerability was identified in feedmob fm-mcp-servers 0.0.3. Affected by this vulnerability is the function downloadReport of the file src/smadex-reporting/src/index.ts of the component Download Endpoint. The manipulation of the argument downloadUrl leads to server-side request forgery. The...