"A search query containing special characters and SQL injection-like encoding" matching MCP servers:

An MCP server for identifying SQL injection vulnerabilities in web applications using various techniques like error-based, time-based, and union-based scanning. It supports bulk URL processing, WAF bypass strategies, and authenticated testing across multiple database systems.

Enables security researchers to evaluate AI system defenses against prompt injection attacks through a comprehensive set of test vectors and analysis tools.

Demonstrates deceptive tool naming and unsanitized shell execution by exposing tools that perform OS fingerprinting and run local system commands through MCP. Intended for security research on vulnerabilities in the MCP ecosystem.

Scans MCP servers for prompt-injection, tool-poisoning, and SSRF vulnerabilities using 30+ canonical rules across 5 severity tiers, with optional signed safety reports for procurement.

Enables searching and analyzing CVEs and vulnerabilities from multiple sources, optimized for PR review scenarios to help developers identify the latest security issues.

Unified vulnerability search MCP server for penetration testing agents, integrating 5 data sources (NVD, OSV, EPSS, CISA KEV, Exploit-DB+GitHub) and 10 MCP tools for CVE query, keyword search, batch query, EPSS scoring, KEV checking, exploit search, and comprehensive assessment with Chinese output.

Enables red-team testing of AI agents against indirect prompt injection by fuzzing payloads with delimiter evasion and Unicode homoglyphs, detecting exfiltration canaries, enforcing least-privilege tool boundaries, and producing cryptographic audit proofs.

Enables real-time indirect prompt injection fuzzing, exfiltration canary detection, least-privilege tool sandboxing, and cryptographic audit proofs over MCP.

Enables users to run synthetic support-agent evaluations, preserve and inspect traces, score results deterministically, inject failures, and enforce release review gates through MCP tools, resources, and prompts.

Enables querying the CVE-Search API to browse vendors, list products for a vendor, retrieve vulnerabilities for a vendor and product, fetch individual CVE records, get the latest CVEs with CAPEC/CWE/CPE expansions, and inspect current database version information. This gives MCP clients direct, structured access to public vulnerability data.

Enables querying the CVE-Search API to browse vendors and their products, retrieve vulnerabilities for a vendor/product pair, look up individual CVE IDs, and fetch the latest 30 CVEs with CAPEC, CWE and CPE expansions. It also reports which databases are in use and when they were last updated.

Enables users to query a vulnerability database for vendors, products, vulnerabilities by product, specific CVE IDs, recent CVEs with CAPEC/CWE/CPE expansions, and database update information.

Enables users to query the CVE-Search API to browse vendors and products, retrieve vulnerabilities by vendor and product, fetch specific CVE records, list recent CVEs with CAPEC/CWE/CPE expansions, and inspect database update status.

Enables users to query the CVE-Search API to browse vendors and products, retrieve vulnerabilities by vendor/product or CVE ID, list recent CVEs with CAPEC, CWE, and CPE expansions, and inspect database status.

Enables users to browse vendors and products, retrieve CVEs by ID, fetch the latest updated CVEs with CAPEC/CWE/CPE expansions, and inspect database update information via the CVE-Search API.

Enables users to query vulnerability data, browse vendors and products, retrieve CVEs by ID or product, fetch recent CVEs with CAPEC/CWE/CPE details, and inspect database status.

Enables users to query the CVE-Search API by browsing vendors and products, retrieving vulnerabilities per vendor/product or CVE-ID, getting the latest 30 CVEs with CAPEC/CWE/CPE expansions, and checking database update information.

Enables querying the CVE-Search API for vendors, products, and vulnerabilities, including lookups by vendor/product, retrieval of individual CVE IDs, and the latest 30 CVEs with CAPEC, CWE, and CPE expansions, plus database status information.

Enables users to query the CVE-Search API to retrieve vendors, products, vulnerabilities by vendor/product, specific CVE IDs, recent CVEs with CAPEC/CWE/CPE expansions, and database update information.

Enables querying the CVE-Search API for vendors, products, vulnerabilities by vendor and product, specific CVE IDs, recent CVEs with CAPEC/CWE/CPE expansions, and database update information.