firecrawl-mcp-server

Firecrawl MCP Server A Model Context Protocol MCP server that brings Firecrawl to MCP-compatible AI agents — search, scrape, and interact with the live web for clean, agent-ready context. Big thanks to @vrknetha, @knacklabs for the initial implementation! Features Search the web and get full page...

CVE-2026-34227

未認証のMCPインターフェース + CORSバイパス SliverのMCPサーバーは未認証のSSEインターフェース を起動し、すべてのレスポンスにAccess-Control-Allow-Origin: を返します。 mcp-goライブラリはContent-Typeを検証しないため、シンプルリクエスト （text/plain）はブラウザのプリフライトチェックを完全にスキップします。OPTIONSなし。CORSブロックなし。認証なし。オペレーターが訪問した任意のページが、そのC2と静かに通信できます。 → GitHubセキュリティアドバイザリ GHSA-6fpf-248c-m7wm...

sandbox-agent

Agents Rivet의 에이전트 인프라. Discord에서 함께하세요. 프로젝트 프로젝트| 디렉터리| 문서 ---|---|--- Rivet Agents : Pi와 같은 에이전트를 내구성 있는 Rivet Actors로 실행 @rivet-dev/pi, @rivet-dev/sandbox-adapter| packages/, 문서는 docs/에 있음| rivet.dev/agents/docs Sandbox Agent : 샌드박스에서 코딩 에이전트를 실행하고 HTTP를 통해 제어| sandbox-agent/| sandboxagent.de...

pentest-mcp

Pentest MCP 현대적인 전송/인증 지원과 확장된 정찰 도구를 갖춘 전문 침투 테스트 MCP 서버입니다. 0.9.0에서 변경된 사항 MCP SDK를 @modelcontextprotocol/sdk@^1.26.0으로 업그레이드 MCP Inspector는 최신 릴리스@modelcontextprotocol/inspector@^0.20.0에 번들 런처와 함께 유지 Streamable HTTP가 이제 기본 네트워크 전송 방식입니다 MCPTRANSPORT=http SSE는 여전히 폐기된 호환성 모드로만 사용 가능 bearer-toke...

studio

ShipSec Studio 오픈소스 보안 워크플로 오케스트레이션 플랫폼. ShipSec은 현재 활발히 개발 중입니다. 안정적인 프로덕션 사용과 고성능 보안 운영을 위해 플랫폼을 최적화하고 있습니다. ShipSec Studio는 자동화된 보안 워크플로를 구축, 실행 및 모니터링하기 위한 시각적 DSL과 런타임을 제공합니다. 보안 로직을 인프라 관리에서 분리하여, 대규모 보안 도구 실행을 위한 내구성 있고 격리된 환경을 제공합니다. YouTube에서 플랫폼 동작을 확인하세요. 🏗️ 핵심 기둥 내구성 있는 재개 가능 워크플로 —...

damn-vulnerable-MCP-server

Damn Vulnerable MCP の Cursor SSE 互換性 このドキュメントでは、Cursor の Server-Sent Events SSE 実装と互換性を持たせるために Damn Vulnerable Model Context Protocol DVMCP プロジェクトに加えられた更新内容の概要を説明します。 概要 元の DVMCP プロジェクトは、Cursor の SSE 実装をサポートするように拡張され、チャレンジサーバーに Cursor から直接アクセスできるようになりました。これにより、実際の MCP...

GitLab MCP Server < 2.1.27 - Unauthenticated SSE Transport Access

The @zereight/mcp-gitlab GitLab MCP server exposes its SSE transport endpoints without any authentication when SSE mode is enabled. An unauthenticated attacker with network access can establish an MCP session and invoke every registered tool, including uploadmarkdown, which reads arbitrary files...

MCP-Inspector-CVE-2025-49596

MCP Inspector CVE-2025-49596 취약점 검사기 이 스크립트는 MCP Inspector 서버가 CVE-2025-49596에 취약한지 확인합니다. 이는 /sse 엔드포인트가 인증되지 않은 요청인증 토큰 누락에 응답하는 보안 문제입니다. 작동 방식 스크립트는 대상 MCP Inspector 서버의 /sse 엔드포인트에 GET 요청을 보냅니다. 응답을 확인합니다: 서버가 인증 토큰을 요구하지 않고 HTTP 200OK으로 응답하면 취약할 가능성이 높습니다. 서버가 HTTP 401Unauthorized로 응답하면 패치된...

CLEANSTART-2026-SB20243 Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent Events (SSE)

Security vulnerability affects the apache-nifi-registry package. Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent Events SSE...

CLEANSTART-2026-ZG60550 Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent Events (SSE)

Security vulnerability affects the rundeck package. Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent Events SSE...

Security Bulletin: As an Spring MVC application, IBM Sterling Control Center is vulnerable to Improper Neutralization of CRLF Sequences (CVE-2026-59313)

Summary Spring MVC framework is used by IBM Sterling Control Center and as part of dependency one of them is in spring-webmvc-6.2.12.jar. Vulnerability Details CVEID:CVE-2026-59313 DESCRIPTION: Spring MVC applications using the functional web framework are vulnerable to stream corruption when usi...

POC-CVE-2026-93680

説明 CVE-2026-93680 の概念実証エクスプロイトコード 使用方法 ステップ 1: MCP SSE に接続する ターミナル 1 ステップ 2: MCP セッションを初期化し、MCP ツールを一覧表示する ターミナル 2 ステップ 3: 認証をバイパスしてデータを窃取する ターミナル 1、ステップ 2 の出力結果...

MCP Atlassian: HTTP upload tools accept arbitrary server-local file paths

sooperset/mcp-atlassian: HTTP upload tools can attach arbitrary server-local filesDate: 2026-05-05Target: sooperset/mcp-atlassianCommit: d8bc78698a63cb6b321c7ca796d6329d448f7f6d Summarymcp-atlassian supports HTTP/SSE deployment for persistent, remote, and multi-user use. In that mode, write-capab...

PYSEC-2026-4104 MCP Atlassian: MCP HTTP Client Server-Local File Exfiltration via Unvalidated Attachment Upload Path

Summary The mcp-atlassian server exposes an MCP tool confluenceuploadattachment and the Jira attachment variant that accepts an arbitrary server-side file path and opens it for upload without any path validation. When the server is deployed in HTTP transport mode streamable-http or sse, a remote,...

djust has an unauthenticated arbitrary module import via the WebSocket/SSE view-mount path

ImpactThe djust live transport resolves the LiveView to mount from a client-supplied dotted path by calling importmodulepath, .... The module is imported — running its top-level code import side effects — before the framework checks that the resolved object is a LiveView subclass and before any...

PYSEC-2026-4038 djust has an unauthenticated arbitrary module import via the WebSocket/SSE view-mount path

Impact The djust live transport resolves the LiveView to mount from a client-supplied dotted path by calling importmodulepath, .... The module is imported — running its top-level code import side effects — before the framework checks that the resolved object is a LiveView subclass and before any...

PYSEC-2026-4047 djust has an authorization bypass on the WebSocket/SSE mount path

Impact The live WebSocket transport authorizes a mount via checkviewauth, not Django's View.dispatch chain. As a result, standard Django authorization — LoginRequiredMixin, PermissionRequiredMixin, UserPassesTestMixin, @methoddecoratorloginrequired, name="dispatch", and custom dispatch guards — a...

djust: Multi-tenant isolation fails open on the WebSocket/SSE path, disclosing other tenants' data

Impactdjust.tenants isolation was enforced only on the HTTP path. The current tenant was stored in threading.local and set exclusively by the HTTP-only TenantMiddleware, so on the live WebSocket/SSE path getcurrenttenant was always None during mount and every event handler — and the tenant-aware...

djust: SSE sessions are not bound to the authenticated user; the client-chosen session_id is the sole authorization capability (session hijack)

ImpactSSE sessions were keyed solely by a client-chosen sessionid with no binding to the authenticated user — a control the WebSocket transport has but that was dropped on SSE. An attacker who learns or a victim who leaks a sessionid could connect to the message endpoint and dispatch event handle...

djust has an authorization bypass on the WebSocket/SSE mount path

ImpactThe live WebSocket transport authorizes a mount via checkviewauth, not Django's View.dispatch chain. As a result, standard Django authorization — LoginRequiredMixin, PermissionRequiredMixin, UserPassesTestMixin, @methoddecoratorloginrequired, name="dispatch", and custom dispatch guards — an...