chameleon

19 Customizable honeypots for monitoring network traffic, bots activities, and username\password credentials DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic and ldap If you want to implement the honeypots in your project,...

AutoSploit

Docker deployment instructions tl;dr Using docker-compose: git clone https://github.com/NullArray/AutoSploit.git cd Autosploit/Docker docker-compose run --rm autosploit Using just Docker: git clone https://github.com/NullArray/AutoSploit.git cd Autosploit/Docker If you wish to edit default postgr...

Mortimer

Mortimer A collection of scripts for processing network forensics type data and intel, mainly into a postgres database. Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed for John Green, cirt at nccgroup dot com https://github.com/nccgroup/mortimer Released under AGPL s...

CVE-2026-126199

pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, the bundled CLI and web clients classified querydatabase statements only by their first keyword before deciding whether to display a write confirmation...

CVE-2026-126196

pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, querydatabase on a readonly connection could send unrecognized statements through pgx Exec without bind parameters, selecting PostgreSQL's simple query...

CVE-2026-126197

pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, custom pl-do tools interpolated JSON arguments into a PostgreSQL DO block delimited by fixed dollar-quote tags. An argument containing $mcpcustomtool$ cou...

CVE-2026-126198

pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, the bundled clients, including the CLI and web client, decided whether to request write confirmation by checking only for the querydatabase tool name...

CVE-2026-126199 pgEdge Postgres MCP Server write confirmation skipped for writes that begin with a reading keyword

pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, the bundled CLI and web clients classified querydatabase statements only by their first keyword before deciding whether to display a write confirmation...

EUVD-2026-124570

pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, the bundled CLI and web clients classified querydatabase statements only by their first keyword before deciding whether to display a write confirmation...

CVE-2026-126199

The pgEdge Postgres MCP Server (prior to version 1.1.0 ) contains a vulnerability where the bundled CLI and web clients fail to request user confirmation for specific write operations. The root cause is that the application classifies query_database statements based only on the first keyword. Con...

CVE-2026-126198 pgEdge Postgres MCP Server custom tools performed writes without user confirmation

pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, the bundled clients, including the CLI and web client, decided whether to request write confirmation by checking only for the querydatabase tool name...

EUVD-2026-124569

pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, the bundled clients, including the CLI and web client, decided whether to request write confirmation by checking only for the querydatabase tool name...

CVE-2026-126198 pgEdge Postgres MCP Server custom tools performed writes without user confirmation

pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, the bundled clients, including the CLI and web client, decided whether to request write confirmation by checking only for the querydatabase tool name...

CVE-2026-126198

The pgEdge Postgres MCP Server (versions prior to 1.1.0 ) contains a vulnerability where bundled clients, including the CLI and web client , perform write operations without user confirmation. The root cause is that these clients only checked for the query_database tool name instead of honoring s...

CVE-2026-126197 pgEdge Postgres MCP Server SQL injection through custom pl-do tool parameters

pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, custom pl-do tools interpolated JSON arguments into a PostgreSQL DO block delimited by fixed dollar-quote tags. An argument containing $mcpcustomtool$ cou...

CVE-2026-126197

The pgEdge Postgres MCP Server (prior to version 1.1.0 ) is vulnerable to SQL injection via custom pl-do tool parameters . The root cause is the interpolation of JSON arguments into a PostgreSQL DO block using fixed dollar-quote tags. Attackers can use specific strings like $mcp_custom_tool$ to t...

EUVD-2026-124568

pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, custom pl-do tools interpolated JSON arguments into a PostgreSQL DO block delimited by fixed dollar-quote tags. An argument containing $mcpcustomtool$ cou...

CVE-2026-126196 pgEdge Postgres MCP Server read-only mode can be bypassed by SQL statement smuggling through query_database

pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, querydatabase on a readonly connection could send unrecognized statements through pgx Exec without bind parameters, selecting PostgreSQL's simple query...

CVE-2026-126196 pgEdge Postgres MCP Server read-only mode can be bypassed by SQL statement smuggling through query_database

pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, querydatabase on a readonly connection could send unrecognized statements through pgx Exec without bind parameters, selecting PostgreSQL's simple query...

EUVD-2026-124566

pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, querydatabase on a readonly connection could send unrecognized statements through pgx Exec without bind parameters, selecting PostgreSQL's simple query...