claude-project-scanner

Claude プロジェクトスキャナー サードパーティプロジェクトを開く前に既知のセキュリティリスクをスキャンする読み取り専用のClaude Codeスキルです。 以下の攻撃パターンを検出します： CVE-2025-59536 Claude Codeライフサイクルフックインジェクション CVE-2025-61260 OpenAI Codex CODEXHOMEインジェクション CVE-2025-54136 Cursorプラグイン検証バイパス...

ctxdebug

MISSION CONTROL FOR REVERSE ENGINEERING One stdio interface · 160+ tools · Three debuggers, one mission control. Quick Start · Architecture · Servers · Workflows · Report an Issue Website · ctxdebug.xyz · Contact · [email protected] · Status · Public alpha Built for authorized reverse...

darknet-mcp-server

English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dansk | 日本語 | Polski | Русский | Bosanski | العربية | Norsk | Português Brasil | ไทย | Türkçe | Українська | বাংলা | Ελληνικά | Tiếng Việt | हिन्दी 为 AI 代理提供暗网与威胁情报。 HIBP、ThreatFox、勒索软件追踪、Tor .onion 访问、区块链情报、漏洞利用搜索、窃密日志、恶意软件分...

idamcp

IDA Pro MCP Server This project provides a Model Context Protocol MCP server for integrating IDA Pro with AI agents like Gemini, Claude, and Jetski. It features a gateway-based proxy architecture, an embedded relational SQLite query engine, and headless session management to support advanced...

MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)

Summary In SSE/HTTP transport mode, mysqlmcpserver constructs SseServerTransport without passing securitysettings. As a result, the MCP Python SDK's DNS-rebinding protection Origin/Host header validation is disabled; the Starlette application has no CORS or TrustedHost middleware; and the service...

CVE-2026-69263

CVE 2026-69263 Qué CVE 2026-69263 es un bypass del parche de la antigua vulnerabilidad RCE parcheada en agosto de 2025. El parche introdujo una denylist que bloqueaba la instalación de paquetes arbitrarios. Cómo Dado que npm lee la configuración de las variables de entorno, establecer la variable...

prismsec

PrismSec 🔷 安全、模块化的渗透测试工具 MCP 服务器。 将 7 款行业标准安全工具（nmap、nuclei、gobuster、subfinder、httpx、nikto、sqlmap）封装为 13 个已注册的 MCP 工具 — 可直接与 Claude、Cursor、Copilot 以及任何兼容 MCP 的 AI 代理配合使用。 功能特性...

local-mcp

local-mcp ローカルファイル操作用のゼロ依存MCPサーバー。 ファイルシステムツール13個＋段階的ディスカバリ用のメタツール3個 — SDK不要、フレームワーク不要、npm installも不要です。 MCPプロトコル: 2024-11-05 · トランスポート: stdio + Streamable HTTP · ランタイム: Node.js ≥ 22.0.0 アーキテクチャ root@kitploit: local-mcp.mjs — 595 lines, 13 tools, entry point lib/mcp-core.mjs — 229 lines, stdio +...

EUVD-2026-75796

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary commands due to improper validation of command-line arguments in the MCP stdio server configuration...

PT-2026-90533

Summary In SSE/HTTP transport mode, mysql mcp server constructs SseServerTransport without passing security settings. As a result, the MCP Python SDK's DNS-rebinding protection Origin/Host header validation is disabled; the Starlette application has no CORS or TrustedHost middleware; and the...

Claude-Code-MCP-Injection-PoC

Claude Code: MCP Tool Confirmation Prompt Misrepresentation A professional Proof-of-Concept PoC demonstrating a critical UI/UX flaw in Anthropic's Claude Code. This vulnerability allows a malicious MCP server to mislead users into approving arbitrary command execution by misrepresenting tool...

trust-boundary-ctf

🐘 Trust Boundary: MCPセッション分離CTF コンソールには「セッションアクティブ 」と表示されます。 すべてのツール呼び出しが成功します。 管理者のOAuthトークンがすべてのレスポンスに含まれています。 Trust Boundary は、ローカルで実行されているMCPサーバーにおける実際のセッション分離の失敗を題材にした、ブラウザベースのCTFラボです。脆弱性はシミュレーションされたものではなく、実行中のプロセス内で発生します。3つのフラグがあります。DevToolsのみ使用。 攻撃...

CVE-2026-87913

A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a pre-registered storage...

functype-mcp-server: MCP `set_functype_version` Package Alias RCE via Unsanitized pnpm install + Dynamic Import

MCP setfunctypeversion Package Alias RCE via Unsanitized pnpm install + Dynamic Import Summary The setfunctypeversion MCP tool in functype-mcp-server accepts an unconstrained version string, interpolates it directly into an npm package specifier functype@, and installs it via pnpm add without any...

GHSA-WCJJ-9M6G-2FR2 functype-mcp-server: MCP `set_functype_version` Package Alias RCE via Unsanitized pnpm install + Dynamic Import

MCP setfunctypeversion Package Alias RCE via Unsanitized pnpm install + Dynamic Import Summary The setfunctypeversion MCP tool in functype-mcp-server accepts an unconstrained version string, interpolates it directly into an npm package specifier functype@, and installs it via pnpm add without any...

CVE-2026-87911

An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an unauthenticated actor to execute operating system commands on the host of a self-managed PostgreSQL server by placing a crafted COPY ... ...

CVE-2026-87911 Read-only enforcement bypass enabling operating system command execution in the SQL validation component of Amazon awslabs postgres-mcp-server

An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an unauthenticated actor to execute operating system commands on the host of a self-managed PostgreSQL server by placing a crafted COPY ... ...

CVE-2026-87911

CVE-2026-87911 is a CRITICAL (CVSS 9.6) OS command injection vulnerability in the SQL validation component of Amazon awslabs postgres-mcp-server prior to version 1.1.7. The flaw lies in the read-only enforcement , which can be bypassed by injecting a crafted COPY ... TO PROGRAM statement into con...

EUVD-2026-75127

An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an unauthenticated actor to execute operating system commands on the host of a self-managed PostgreSQL server by placing a crafted COPY ... ...

CVE-2026-85788

Incomplete list of disallowed inputs in the mutable SQL detector component in Amazon awslabs mysql-mcp-server might allow context-dependent actors to bypass the read-only enforcement gate and reach file-read and file-write SQL sinks via SQL inline comments that the regex engine does not treat as...