Lucene search
+L

5 matches found

Kitploit
Kitploit
•added 2026/10/11 12:13 p.m.•22 views

agentsid-scanner

AgentsID Scanner El Faro de la seguridad de agentes. Escanea cualquier servidor MCP. Obtén un boletín de calificaciones de seguridad. Tu servidor MCP expone herramientas a agentes de IA. ¿Qué tan seguro es? La mayoría de los servidores MCP vienen sin autenticación, sin permisos por herramienta, s...

6.6AI score
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/08/03 11:50 p.m.•17 views

SUSE CVE-2026-17350

The per-tool permission system custom roles / role-based tool permissions, introduced in pgAdmin 4 9.3 did not enforce its permission check consistently. In SERVER mode, pgAdmin 4 gates each tool behind a per-tool Flask-Security permission, but the permission decorator permissionsrequired was...

5.4CVSS5.9AI score0.00376EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/07/31 4:00 p.m.•35 views

EUVD-2026-51563

The per-tool permission system custom roles / role-based tool permissions, introduced in pgAdmin 4 9.3 did not enforce its permission check consistently. In SERVER mode, pgAdmin 4 gates each tool behind a per-tool Flask-Security permission, but the permission decorator permissionsrequired was...

5.4CVSS5.9AI score0.00376EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/07/31 4:00 p.m.•21 views

CVE-2026-17350 pgAdmin 4: Tool permission bypass via backend routes and Socket.IO handlers

The per-tool permission system custom roles / role-based tool permissions, introduced in pgAdmin 4 9.3 did not enforce its permission check consistently. In SERVER mode, pgAdmin 4 gates each tool behind a per-tool Flask-Security permission, but the permission decorator permissionsrequired was...

5.4CVSS5.9AI score0.00376EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/07/31 12:00 a.m.•30 views

PT-2026-66775

Name of the Vulnerable Software and Affected Versions pgAdmin 4 versions 9.3 through 9.16 Description In SERVER mode, the per-tool permission system fails to consistently enforce permission checks. While a permissions required decorator is used on the initial route of a tool, subsequent backend...

5.4CVSS5.8AI score0.00376EPSS
SaveExploits0References34
Rows per page
Query Builder