CVE-2026-23744-MCPJAM-RCE-exploit

CVE-2026-23744-MCPJAM-RCE-exploit 此 Python 概念验证工具针对目标应用暴露的易受攻击的 MCP（模型上下文协议）服务。该漏洞允许攻击者通过 /api/mcp/connect 端点提供任意服务器配置参数。 受影响的端点 POST /api/mcp/connect 使用的工具和技术 Python 3 requests 库 HTTP/JSON API 通信 MCP 服务接口 执行 安装依赖： pip install requests 运行概念验证： python exploit.py 概念验证流程 定义目标 MCP 端点。 构造恶意 serverConf...

CVE-2020-25498

CVE-2020-25498: XSS almacenado mediante CSRF en el router Beetel 777VR1 Descripción de la vulnerabilidad Se ha identificado que el endpoint vulnerable no tiene validación de entrada en el lado del servidor y carece de filtrado en el lado del cliente frente a cualquier inyección de script malicios...

CVE-2026-91932 Flowise before 3.1.4 Remote Code Execution via cwd Parameter

Flowise before 3.1.4 contains a validation bypass vulnerability in MCP server configuration allowing authenticated attackers remote code execution through an unvalidated cwd parameter. Attackers can bypass path validation using clean filenames in the args array while controlling the working...

CVE-2026-57128 PraisonAI: Unauthenticated Event Injection via SSE `/publish` Endpoint

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the SSE server in src/praisonai-agents/praisonaiagents/server/server.py does not consult ServerConfig.authtoken before handling /publish, /events, or /info requests. A network client that can reach the server can broadcast...

CVE-2026-57128 PraisonAI: Unauthenticated Event Injection via SSE `/publish` Endpoint

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the SSE server in src/praisonai-agents/praisonaiagents/server/server.py does not consult ServerConfig.authtoken before handling /publish, /events, or /info requests. A network client that can reach the server can broadcast...

EUVD-2026-63480

LangBot is a global IM bot platform designed for LLMs. In version 4.10.7 and earlier, any authenticated user can add or change an STDIO MCP server configuration without an adequate authorization boundary. In src/langbot/pkg/provider/tools/loaders/mcp.py, StdioServerParameters accepts the configur...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: chartmuseum, nri-redis, grafana-rollout-operator, rabbitmq-default-user-credential-updater, trivy, migrate, hubble, kyverno-notation-aws, opentofu, cilium-cli, kubecolor, nri-f5, nats-server-config-reloader, controller-gen, witness, yunikorn-k8shim, render-template,...

CVE-2026-18703

An issue in MongoDB Server could allow a party with a valid client certificate and a corresponding user account to authenticate using a certificate-based authentication method, even when an administrator has configured the server to restrict authentication to other mechanisms. This could allow...

Exploit for Code Injection in Flowiseai Flowise

CVE-2025-59528 Educational PoC Educational use only. Th...

CVE-2026-19341

CVE-2026-19341 affects UTT HiPER 1200GW (up to version 2.5.3-170306). The vulnerability targets the strcpy usage in /goform/pptpSrvGlobalConfig, where manipulation of the EncryptionMode argument causes a stack-based buffer overflow. This can be triggered remotely and is publicly disclosed; exploi...

CVE-2026-58080

In Eclipse Milo versions 1.0.0 through 1.1.4, OpcUaServerConfig.copy fails to preserve a configured RoleMapper. On servers that rely on role permissions and construct the running configuration through copy, sessions receive no role IDs and the default access controller skips role-permission check...

CVE-2026-58080

In Eclipse Milo versions 1.0.0 through 1.1.4, OpcUaServerConfig.copy fails to preserve a configured RoleMapper. On servers that rely on role permissions and construct the running configuration through copy, sessions receive no role IDs and the default access controller skips role-permission check...

PT-2026-61712

Name of the Vulnerable Software and Affected Versions Tenda TX9 version V22.03.02.20 Description A stack overflow occurs in the sub 42EA38 function within the /goform/SetVirtualServerCfg file. A stack overflow is a condition where a program writes more data to a stack-allocated buffer than it can...

CVE-2026-45309

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.23.0, AsyncSSH expands the OpenSSH-compatible AuthorizedKeysFile %u token in asyncssh/config.py, asyncssh/connection.py,...

Improper Handling of Case Sensitivity

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Improper Handling of Case Sensitivity in the .htaccess process. An attacker can gain unauthorized access to sensitive configuration files by...

PYSEC-2026-2599 LiteLLM: Authenticated command execution via MCP stdio test endpoints

Impact Two endpoints used to preview an MCP server before saving it — POST /mcp-rest/test/connection and POST /mcp-rest/test/tools/list — accepted a full server configuration in the request body, including the command, args, and env fields used by the stdio transport. When called with a stdio...

PT-2026-59133

Impact An uncontrolled-resource-consumption memory exhaustion denial-of-service vulnerability CWE-400 / CWE-789. A client with push access could push a tiny crafted thin pack 174 bytes whose delta header declares a huge dest size. When dulwich ingested it via add thin pack / apply delta, it would...

CVE-2026-54590

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Version 2.23.0 contains an incomplete fix for CVE-2026-45309 in SSHServerConfig.settokens that blocks /, , and .. before %u substitution in...

litellm passes untrusted data to `eval` function without sanitization

A remote code execution RCE vulnerability exists in the berriai/litellm project due to improper control of the generation of code when using the eval function unsafely in the litellm.getsecret method. Specifically, when the server utilizes Google KMS, untrusted data is passed to the eval function...

PYSEC-2026-1542 litellm passes untrusted data to `eval` function without sanitization

A remote code execution RCE vulnerability exists in the berriai/litellm project due to improper control of the generation of code when using the eval function unsafely in the litellm.getsecret method. Specifically, when the server utilizes Google KMS, untrusted data is passed to the eval function...