Lucene search
+L

5 matches found

Kitploit
Kitploit
•added 2026/10/29 2:24 p.m.•29 views

agentsid-scanner

AgentsID Scanner The Lighthouse of agent security. Scan any MCP server. Get a security report card. Your MCP server exposes tools to AI agents. How secure is it? Most MCP servers ship with no authentication, no per-tool permissions, no input validation, and tool descriptions vulnerable to prompt...

6.6AI score
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2026/08/03 11:50 p.m.•19 views

SUSE CVE-2026-17350

The per-tool permission system custom roles / role-based tool permissions, introduced in pgAdmin 4 9.3 did not enforce its permission check consistently. In SERVER mode, pgAdmin 4 gates each tool behind a per-tool Flask-Security permission, but the permission decorator permissionsrequired was...

5.4CVSS5.9AI score0.00376EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/07/31 4:00 p.m.•23 views

CVE-2026-17350 pgAdmin 4: Tool permission bypass via backend routes and Socket.IO handlers

The per-tool permission system custom roles / role-based tool permissions, introduced in pgAdmin 4 9.3 did not enforce its permission check consistently. In SERVER mode, pgAdmin 4 gates each tool behind a per-tool Flask-Security permission, but the permission decorator permissionsrequired was...

5.4CVSS5.9AI score0.00376EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/07/31 4:00 p.m.•41 views

EUVD-2026-51563

The per-tool permission system custom roles / role-based tool permissions, introduced in pgAdmin 4 9.3 did not enforce its permission check consistently. In SERVER mode, pgAdmin 4 gates each tool behind a per-tool Flask-Security permission, but the permission decorator permissionsrequired was...

5.4CVSS6AI score0.00376EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/07/31 12:00 a.m.•33 views

PT-2026-66775

Name of the Vulnerable Software and Affected Versions pgAdmin 4 versions 9.3 through 9.16 Description In SERVER mode, the per-tool permission system fails to consistently enforce permission checks. While a permissions required decorator is used on the initial route of a tool, subsequent backend...

5.4CVSS5.8AI score0.00376EPSS
SaveExploits0References34
Rows per page
Query Builder