mirror of
https://github.com/nomi-sec/PoC-in-GitHub.git
synced 2026-11-07 08:30:25 -10:00
129 lines
4.9 KiB
JSON
129 lines
4.9 KiB
JSON
[
|
|
{
|
|
"id": 1143902427,
|
|
"name": "CTT-Serverless-RCE-v1.0---Convergent-Time-Theory-Enhanced-MCP-Exploit",
|
|
"full_name": "SimoesCTT\/CTT-Serverless-RCE-v1.0---Convergent-Time-Theory-Enhanced-MCP-Exploit",
|
|
"owner": {
|
|
"login": "SimoesCTT",
|
|
"id": 94452709,
|
|
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/94452709?v=4",
|
|
"html_url": "https:\/\/github.com\/SimoesCTT",
|
|
"user_view_type": "public"
|
|
},
|
|
"html_url": "https:\/\/github.com\/SimoesCTT\/CTT-Serverless-RCE-v1.0---Convergent-Time-Theory-Enhanced-MCP-Exploit",
|
|
"description": "Serverless Framework MCP Server (CVE-2025-69256) Base Score: 9.4\/10 → CTT Enhanced Score: 9.9\/10 A critical command injection vulnerability in Serverless Framework's MCP (Model Context Protocol) server enhanced with CTT temporal resonance for unprecedented exploitation reliability and evasion.",
|
|
"fork": false,
|
|
"created_at": "2026-01-28T04:32:47Z",
|
|
"updated_at": "2026-01-28T04:37:13Z",
|
|
"pushed_at": "2026-01-28T04:37:10Z",
|
|
"stargazers_count": 0,
|
|
"watchers_count": 0,
|
|
"has_discussions": false,
|
|
"forks_count": 0,
|
|
"allow_forking": true,
|
|
"is_template": false,
|
|
"web_commit_signoff_required": false,
|
|
"has_pull_requests": true,
|
|
"pull_request_creation_policy": "all",
|
|
"topics": [],
|
|
"visibility": "public",
|
|
"forks": 0,
|
|
"watchers": 0,
|
|
"score": 0,
|
|
"subscribers_count": 0
|
|
},
|
|
{
|
|
"id": 1222893330,
|
|
"name": "mcp-server-attestation",
|
|
"full_name": "studiomeyer-io\/mcp-server-attestation",
|
|
"owner": {
|
|
"login": "studiomeyer-io",
|
|
"id": 267274902,
|
|
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/267274902?v=4",
|
|
"html_url": "https:\/\/github.com\/studiomeyer-io",
|
|
"user_view_type": "public"
|
|
},
|
|
"html_url": "https:\/\/github.com\/studiomeyer-io\/mcp-server-attestation",
|
|
"description": "Layer-2 supply-chain hardening for MCP servers — Ed25519-signed tool manifests, runtime spawn-attestation, default-deny argument sanitizer. Defends against marketplace-poisoning + CVE-2025-69256 + CVE-2025-61591.",
|
|
"fork": false,
|
|
"created_at": "2026-04-27T20:12:08Z",
|
|
"updated_at": "2026-11-01T21:09:36Z",
|
|
"pushed_at": "2026-11-01T21:17:01Z",
|
|
"stargazers_count": 0,
|
|
"watchers_count": 0,
|
|
"has_discussions": true,
|
|
"forks_count": 0,
|
|
"allow_forking": true,
|
|
"is_template": false,
|
|
"web_commit_signoff_required": false,
|
|
"has_pull_requests": true,
|
|
"pull_request_creation_policy": "all",
|
|
"topics": [
|
|
"anthropic",
|
|
"attestation",
|
|
"built-in-mallorca",
|
|
"cli",
|
|
"cve-2025-61591",
|
|
"cve-2025-69256",
|
|
"ed25519",
|
|
"manifest",
|
|
"mcp",
|
|
"mcp-server",
|
|
"model-context-protocol",
|
|
"security",
|
|
"signing",
|
|
"sigstore",
|
|
"supply-chain-security",
|
|
"typescript"
|
|
],
|
|
"visibility": "public",
|
|
"forks": 0,
|
|
"watchers": 0,
|
|
"score": 0,
|
|
"subscribers_count": 0
|
|
},
|
|
{
|
|
"id": 1232285724,
|
|
"name": "mcp-stdio-shellguard",
|
|
"full_name": "studiomeyer-io\/mcp-stdio-shellguard",
|
|
"owner": {
|
|
"login": "studiomeyer-io",
|
|
"id": 267274902,
|
|
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/267274902?v=4",
|
|
"html_url": "https:\/\/github.com\/studiomeyer-io",
|
|
"user_view_type": "public"
|
|
},
|
|
"html_url": "https:\/\/github.com\/studiomeyer-io\/mcp-stdio-shellguard",
|
|
"description": "Defense-in-depth bundle for MCP stdio servers: drop-in guardExec\/guardSpawn wrappers, AST audit CLI, reference MCP server. Closes the Ox-Security 200k-server stdio-RCE class (LiteLLM CVE-2025-69256). MIT, TypeScript, Node >= 20.",
|
|
"fork": false,
|
|
"created_at": "2026-05-07T19:24:41Z",
|
|
"updated_at": "2026-11-01T21:09:53Z",
|
|
"pushed_at": "2026-11-01T21:41:46Z",
|
|
"stargazers_count": 0,
|
|
"watchers_count": 0,
|
|
"has_discussions": false,
|
|
"forks_count": 0,
|
|
"allow_forking": true,
|
|
"is_template": false,
|
|
"web_commit_signoff_required": false,
|
|
"has_pull_requests": true,
|
|
"pull_request_creation_policy": "all",
|
|
"topics": [
|
|
"built-in-mallorca",
|
|
"command-injection",
|
|
"mcp",
|
|
"mcp-security",
|
|
"model-context-protocol",
|
|
"rce",
|
|
"security",
|
|
"static-analysis",
|
|
"stdio",
|
|
"typescript"
|
|
],
|
|
"visibility": "public",
|
|
"forks": 0,
|
|
"watchers": 0,
|
|
"score": 0,
|
|
"subscribers_count": 0
|
|
}
|
|
] |