"Security vulnerabilities in MCP Server related to subprocess execution" matching MCP servers:

Enables AI assistants to interact with KnowBe4 security awareness training data via the KnowBe4 Reporting REST API.

Exposes a small catalog of programming study topics through the Model Context Protocol (MCP) for local learning.

Enables interaction with Zhejiang University's learning platform (学在浙大 / 智云课堂) via MCP tools, allowing natural language commands to check todos, view schedules, fetch lecture transcripts, and submit homework.

An MCP server that integrates with the Dnevnik.ru API to provide AI assistants with access to school schedules, grades, and homework. It enables users to query educational data and manage school-related information through natural language.

An educational MCP server demonstrating common security vulnerabilities like command injection, path traversal, SQL injection, and XXE attacks. Designed for security training purposes only, not for production use.

A vulnerable MCP server designed for educational CTF challenges. It demonstrates various MCP security vulnerabilities in a controlled environment.

A deliberately vulnerable MCP server that allows clients to interact with a database for educational purposes, demonstrating security vulnerabilities including SQL injection, arbitrary code execution, and sensitive data exposure.

MCP server for Medify UCAT accounts that authenticates as a member, pulls completed mock scores and practice analytics, and exposes tools for score trends, question-type weaknesses, timing sinks, and practice recommendations.

Enables LLMs to search and retrieve exam problems, solutions, and answers from the СДАМ ГИА educational platform across multiple subjects. It supports fuzzy text matching, catalog browsing, and structured data retrieval to assist with academic study and test preparation.

Packages self-contained HTML or Claude Design bundles into SCORM 2004 courses any LMS can import, with offline asset inlining, milestone-based completion/progress and score tracking. Fully local, no telemetry; validated end-to-end on SCORM Cloud.

An educational MCP server example demonstrating how to build a server that integrates with LLM clients like Claude Desktop.

Enables querying Schoox LMS data (users, courses, enrollments, etc.) via natural language using AI assistants, without writing API code.

Read-only MCP server providing Wealthi's AI Coach with scoped access to student progress data from Firestore and Supabase, enabling AI to retrieve student profiles, progress, assessment results, and learning signals without direct database credentials.

Connect AI assistants to Unfold It -- create goals with AI-generated plans, agent-assisted clarification, plan import with enrichment, individual progress tracking, cohort analytics, and skill assessments.

Enables integration with LeetCode APIs to retrieve problems, contests, solutions, and user data, support daily challenges and advanced searches, and perform authenticated actions such as running or submitting code and managing notes.

Local MCP voice coach that provides English pronunciation, grammar, and fluency feedback from microphone recordings. It supports free-form voice conversation, focused practice drills, phoneme-level feedback, prosody hints, and learner-profile guidance.

Enables searching and browsing the Ace Achievers course catalog and question bank with tiered hint reveals.

Enables querying of a locally pinned snapshot of the Education-to-Workforce Indicator Framework — 99 indicators and 11.8M observations — to browse questions, describe metrics, resolve places, and fetch or rank data across national, state, county, and district levels.

Enables AI assistants to connect to D2L Brightspace and retrieve grades, assignments, announcements, and course content on demand via natural language, working across clients like Claude, ChatGPT, Cursor, and Windsurf.

Enables AI assistants to search and read Materio's educational PDF resources directly, without manual file uploads.