Lucene search
+L

4 matches found

Kitploit
Kitploit
added 2026/09/21 7:36 a.m.9 views

agentsid-scanner

AgentsID Scanner The Lighthouse of agent security. Scan any MCP server. Get a security report card. Your MCP server exposes tools to AI agents. How secure is it? Most MCP servers ship with no authentication, no per-tool permissions, no input validation, and tool descriptions vulnerable to prompt...

6AI score
SaveExploits0References1
EUVD
EUVD
added 2026/07/31 4:00 p.m.28 views

EUVD-2026-51563

The per-tool permission system custom roles / role-based tool permissions, introduced in pgAdmin 4 9.3 did not enforce its permission check consistently. In SERVER mode, pgAdmin 4 gates each tool behind a per-tool Flask-Security permission, but the permission decorator permissionsrequired was...

5.4CVSS5.5AI score0.00216EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/07/31 4:00 p.m.15 views

CVE-2026-17350 pgAdmin 4: Tool permission bypass via backend routes and Socket.IO handlers

The per-tool permission system custom roles / role-based tool permissions, introduced in pgAdmin 4 9.3 did not enforce its permission check consistently. In SERVER mode, pgAdmin 4 gates each tool behind a per-tool Flask-Security permission, but the permission decorator permissionsrequired was...

5.4CVSS5.5AI score0.00216EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/31 12:00 a.m.23 views

PT-2026-66775

Name of the Vulnerable Software and Affected Versions pgAdmin 4 versions 9.3 through 9.16 Description In SERVER mode, the per-tool permission system fails to consistently enforce permission checks. While a permissions required decorator is used on the initial route of a tool, subsequent backend...

5.4CVSS5.3AI score0.00216EPSS
SaveExploits0References34
Rows per page
Query Builder