Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2026-23744 — CVE-2026-23744 Proof-of-concept. | Kitploit
Tools/GitHubGitHub/m2sousa/cve-2026-23744
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingRemote Access Tool
GitHubm2sousa/cve-2026-23744

CVE-2026-23744

CVE-2026-23744 Proof-of-concept.

View Repository
2 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2026-23744

Description

MCPJam inspector is a local-first development platform for MCP servers. The versions <=1.4.2 are vulnerable to remote code execution vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. For details about the vulnerability, see references.

Usage

Requirement

root@kitploit:~
$ pip install requests

Proof-of-concept usage

root@kitploit:~
$ python3 exploit.py [-h] [--lhost LHOST] [--lport LPORT] [--rhost RHOST] [--rport RPORT]

Options

root@kitploit:~
-h, --help     show the help message and exit
--lhost LHOST  local host IP
--lport LPORT  local host port
--rhost RHOST  remote IP
--rport RPORT  remote port

References

  • cve.org/CVERecord?id=CVE-2026-23744
  • github.com/advisories/GHSA-232v-j27c-5pp6
Download Tool