Flowise - Remote Code Execution

Flowise 3.0.5 contains a remote code execution vulnerability caused by unsafe evaluation of user input in the CustomMCP node's convertToValidJSONString function, letting remote attackers execute arbitrary code with full Node.js privileges, exploit requires user input to be processed by the...

claude-project-scanner

Escáner de Proyectos Claude Skill de Claude Code de solo lectura que escanea proyectos de terceros en busca de riesgos de seguridad conocidos antes de que los abras. Detecta los patrones de ataque documentados en: CVE-2025-59536 inyección de Lifecycle Hooks de Claude Code CVE-2025-61260 inyección...

ctxdebug

MISSION CONTROL FOR REVERSE ENGINEERING One stdio interface · 160+ tools · Three debuggers, one mission control. Quick Start · Architecture · Servers · Workflows · Report an Issue Website · ctxdebug.xyz · Contact · [email protected] · Status · Public alpha...

mcp-pwn

CVE-2026-23744 — Ejecución remota de código no autenticada en MCPJam Resumen MCPJam es un inspector y proxy MCP Model Context Protocol de código abierto utilizado para conectar, depurar y gestionar servidores MCP. Las versiones = 1.4.2 exponen el endpoint /api/mcp/connect sin autenticación ni...

darknet-mcp-server

English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dansk | 日本語 | Polski | Русский | Bosanski | العربية | Norsk | Português Brasil | ไทย | Türkçe | Українська | বাংলা | Ελληνικά | |...

red-clippy

Red Clippy Your agent tests. Red Clippy keeps the record. Open-source pentest management built to be operated by an AI agent. Connect it to Claude Code over MCP and it runs the engagement alongside you: scope and assets, recon observations, methodology coverage, and findings with CVSS and evidenc...

CVE-2026-5029-Exploit

🔥 CVE-2026-5029 — Code Runner MCP Server RCE Ejecución Remota de Código sin autenticación a través de la herramienta MCP run-code Exploit de Prueba de Concepto para CVE-2026-5029 — una vulnerabilidad crítica de Ejecución Remota de Código sin autenticación en Code Runner MCP Server, desencadenada ...

area51

Cada callback, capturado. El servidor de exploits para hallazgos out-of-band. Apunta un objetivo a un dominio que poseas. Cada solicitud HTTP y cada correo electrónico que devuelva aterriza en un panel que controlas, y recibe la respuesta que elijas a cambio. Primeros pasos · Playbooks · · ·...

idamcp

IDA Pro MCP Server This project provides a Model Context Protocol MCP server for integrating IDA Pro with AI agents like Gemini, Claude, and Jetski. It features a gateway-based proxy architecture, an embedded relational SQLite query engine, and headless session management to support advanced...

GHSA-65H7-9WRW-629C FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix

Summary The published fix for GHSA-v6ph-xcq9-qxxj / CVE-2026-39885 added a direct hostname denylist for OpenAPI external $ref dereferencing, but the latest patched dependency mcp-from-openapi 2.3.0 still makes backend-origin requests to loopback when the target is reached through hostname...

NPM: FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix

NPM: FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix vulnerability discovered by ? in WordPress Npm mcp-from-openapi versions = 2.3.0, 2.5.0...

FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix

Summary The published fix for GHSA-v6ph-xcq9-qxxj / CVE-2026-39885 added a direct hostname denylist for OpenAPI external $ref dereferencing, but the latest patched dependency mcp-from-openapi 2.3.0 still makes backend-origin requests to loopback when the target is reached through hostname...

NPM: FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix

NPM: FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix vulnerability discovered by ? in WordPress Npm frontmcp versions = 1.2.1, 1.5.0...

MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)

Summary In SSE/HTTP transport mode, mysqlmcpserver constructs SseServerTransport without passing securitysettings. As a result, the MCP Python SDK's DNS-rebinding protection Origin/Host header validation is disabled; the Starlette application has no CORS or TrustedHost middleware; and the service...

CVE-2026-69263

CVE 2026-69263 What CVE 2026-69263 is a patch bypass of the old RCE vulnerability patched back in August of 2025. The patch introduced a Denylist that blocked installation of arbitrary packages. How Since npm reads config from environment variables, setting the npmconfigyes=true environment...

unidbg

unidbg Permite emular una librería nativa de Android, además de una emulación experimental de iOS. Este es un proyecto educativo para aprender más sobre el formato de archivo ELF/MachO y el ensamblador ARM. ¡Úsalo bajo tu propio riesgo! Características Soporte de MCP Model Context Protocol para...

prismsec

PrismSec 🔷 Servidor MCP seguro y modular para herramientas de pentesting. Integra 7 herramientas de seguridad estándar de la industria nmap, nuclei, gobuster, subfinder, httpx, nikto, sqlmap como 13 herramientas MCP registradas, listas para usar con Claude, Cursor, Copilot y cualquier agente de I...

CVE-2026-18953

CVE-2026-18953 — PoC Escritura arbitraria de archivos en awslabs.aws-transform-mcp-server servidor MCP de AWS Transform a través del parámetro savePath de la herramienta getresource...

UAP-protocol

root@kitploit: ██╗ ██╗ █████╗ ██████╗ ██║ ██║██╔══██╗██╔══██╗ ██║ ██║███████║██████╔╝ ██║ ██║██╔══██║██╔═══╝ ╚██████╔╝██║ ██║██║ ╚═════╝ ╚═╝ ╚═╝╚═╝ Universal Agent Protocol Un protocolo de comunicación unificado y centrado en la seguridad para el acceso a herramientas, la coordinación de agentes ...

scopeblind-gateway v0.13.1

protect-mcp Fail-closed Cedar policy gate plus signed receipts for AI agent tool calls. protect-mcp is a gate that sits in front of an AI agent's tool calls. It evaluates each call against a Cedar policy the same language AWS uses for IAM, blocks what breaks the rules before it runs, and signs an...