NPM: FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix

NPM: FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix vulnerability discovered by ? in WordPress Npm mcp-from-openapi versions = 2.3.0, 2.5.0...

NPM: FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix

NPM: FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix vulnerability discovered by ? in WordPress Npm frontmcp versions = 1.2.1, 1.5.0...

FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix

Summary The published fix for GHSA-v6ph-xcq9-qxxj / CVE-2026-39885 added a direct hostname denylist for OpenAPI external $ref dereferencing, but the latest patched dependency mcp-from-openapi 2.3.0 still makes backend-origin requests to loopback when the target is reached through hostname...

MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)

Summary In SSE/HTTP transport mode, mysqlmcpserver constructs SseServerTransport without passing securitysettings. As a result, the MCP Python SDK's DNS-rebinding protection Origin/Host header validation is disabled; the Starlette application has no CORS or TrustedHost middleware; and the service...

CVE-2026-69263

CVE 2026-69263 概述 CVE 2026-69263 是 2025 年 8 月修补的旧 RCE 漏洞的补丁绕过。该补丁引入了一个阻止列表（Denylist），用于阻止任意包的安装。 原理 由于 npm 会从环境变量读取配置，设置 npmconfigyes=true 环境变量会重新启用被阻止的行为。 受影响版本 Flowise 3.1.1（报告时为止的最新版本）。已在 3.1.3 中修复。 PoC 以下 MCP 服务器配置通过 CUSTOMMCPSECURITYCHECK=true 绕过了该补丁： root@kitploit: "mcpServers": "bypass":...

unidbg

unidbg 允许您模拟 Android 原生库，以及实验性的 iOS 模拟。 这是一个教育项目，用于更深入地了解 ELF/MachO 文件格式和 ARM 汇编。 使用风险自负！ 功能 支持 MCP 模型上下文协议 用于与 Cursor 及其他 AI 工具进行 AI 辅助调试。 模拟 JNI Invocation API，以便可以调用 JNIOnLoad。 支持 JavaVM、JNIEnv。 模拟 syscall 指令。 支持 ARM32 和 ARM64。 内联 Hook，感谢 Dobby。 Android 导入 Hook，感谢 xHook。 iOS 的 fishhook、substra...

prismsec

PrismSec 🔷 安全、模块化的渗透测试工具 MCP 服务器。 将 7 款行业标准安全工具（nmap、nuclei、gobuster、subfinder、httpx、nikto、sqlmap）封装为 13 个已注册的 MCP 工具 — 可直接与 Claude、Cursor、Copilot 以及任何兼容 MCP 的 AI 代理配合使用。 功能特性...

CVE-2026-18953

CVE-2026-18953 — PoC 通过 awslabs.aws-transform-mcp-server （AWS Transform MCP 服务器）中 getresource 工具的 savePath 参数实现任意文件写入。 | ---|--- CVE| CVE-2026-18953 CWE| CWE-22 — 对受限目录的路径名限制不当 受影响版本| awslabs.aws-transform-mcp-server 0.1.0 – 0.1.4 修复版本| 0.1.5 CVSS v3.1| 8.6 高危 — AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:...

UAP-protocol

root@kitploit: ██╗ ██╗ █████╗ ██████╗ ██║ ██║██╔══██╗██╔══██╗ ██║ ██║███████║██████╔╝ ██║ ██║██╔══██║██╔═══╝ ╚██████╔╝██║ ██║██║ ╚═════╝ ╚═╝ ╚═╝╚═╝ Universal Agent Protocol A unified, security-first wire protocol for tool access, agent coordination, and structured RPC. Built to close CVE-2025-495...

scopeblind-gateway v0.13.1

protect-mcp Fail-closed Cedar policy gate plus signed receipts for AI agent tool calls. protect-mcp is a gate that sits in front of an AI agent's tool calls. It evaluates each call against a Cedar policy the same language AWS uses for IAM, blocks what breaks the rules before it runs, and signs an...

CTT-Enhanced-CVE-2026-46339-Exploit-Engine

CTT-增强版-CVE-2026-46339-漏洞利用引擎 一个专门的 Python 框架，通过 9Router 模型上下文协议（MCP）桥接执行未认证的远程代码执行，其方式是部署 33 层时间相位级联、Riemann-Hadamard 色散以及 11 ns 楔形滤波器，以绕过传统的代理和进程监控防御。 CTT-增强版漏洞利用的完整详情 ​核心漏洞机制（CVE-2026-46339）：9Router 版本直至 0.4.36 均未通过 src/proxy.js 认证中间件保护 /api/cli-tools/ 和 /api/mcp/ 路径。这允许未认证的攻击者向...

local-mcp

local-mcp Zero-dependency MCP server for local file operations. 13 filesystem tools + 3 meta-tools for progressive discovery — no SDKs, no frameworks, no npm install needed. MCP Protocol: 2024-11-05 · Transport: stdio + Streamable HTTP · Runtime: Node.js ≥ 22.0.0 Architecture root@kitploit:...

EUVD-2026-75780

IBM Langflow OSS 1.0.0 through 1.11.5 allows an authenticated non-administrative user could execute arbitrary operating system commands on the server at the privilege level of the application process by constructing a flow with an MCP Tools component configured to use a local stdio subprocess...

EUVD-2026-75796

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary commands due to improper validation of command-line arguments in the MCP stdio server configuration...

EUVD-2026-75798

IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative access due to the use of default credentials...

EU_compliance_MCP

EU Regulations MCP Server ⚰️ RETIRED — folded into ansvar-mcp-fleet 2026-07-07 This standalone repo is archived. The eu-regulations corpus now lives at Ansvar-Systems/ansvar-mcp-fleet under mcps/eu-regulations/ fold: fleet PR 594; cutover: deploy PR 653, live 2026-07-07. Production serves the...

PT-2026-90548

Summary The published fix for GHSA-v6ph-xcq9-qxxj / CVE-2026-39885 added a direct hostname denylist for OpenAPI external $ref dereferencing, but the latest patched dependency mcp-from-openapi 2.3.0 still makes backend-origin requests to loopback when the target is reached through hostname...

CVE-2025-58434_CVE-2025-59528

CVE-2025-58434CVE-2025-59528 PoC Script CVE-2025-58434 Flowise -lp...

TS_LLMLib

tsllmlib - TrustedSec LLM Library TrustedSec LLM Library is a Python library for interacting with local LLMs that support tool usage. It enables running large workflows traditionally only possible with frontier models by leveraging local LLM endpoints and MCP Model Context Protocol integration...

CVE-2026-81941

IBM Langflow OSS 1.0.0 through 1.11.5 allows an authenticated non-administrative user could execute arbitrary operating system commands on the server at the privilege level of the application process by constructing a flow with an MCP Tools component configured to use a local stdio subprocess...