Lucene search
+L

4 matches found

Kitploit
Kitploit
added 2026/08/27 1:32 a.m.2 views

agentsid-scanner

AgentsID Scanner 에이전트 보안의 등대 모든 MCP 서버를 스캔하고 보안 성적표를 받으세요. MCP 서버가 AI 에이전트에 도구를 노출합니다. 얼마나 안전할까요? 대부분의 MCP 서버는 인증, 도구별 권한, 입력 검증, 프롬프트 인젝션에 취약한 도구 설명 없이 제공됩니다. 하지만 아직 모르고 있을 뿐입니다. AgentsID Scanner가 알려드립니다. 빠른 시작 root@kitploit: npx @agentsid/scanner -- npx @some/mcp-server 끝입니다. 등급과 상세한 결과를 받아보세요...

5.4AI score
SaveExploits0References1
EUVD
EUVD
added 2026/07/31 4:00 p.m.24 views

EUVD-2026-51563

The per-tool permission system custom roles / role-based tool permissions, introduced in pgAdmin 4 9.3 did not enforce its permission check consistently. In SERVER mode, pgAdmin 4 gates each tool behind a per-tool Flask-Security permission, but the permission decorator permissionsrequired was...

5.4CVSS5.5AI score0.00216EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/07/31 4:00 p.m.13 views

CVE-2026-17350 pgAdmin 4: Tool permission bypass via backend routes and Socket.IO handlers

The per-tool permission system custom roles / role-based tool permissions, introduced in pgAdmin 4 9.3 did not enforce its permission check consistently. In SERVER mode, pgAdmin 4 gates each tool behind a per-tool Flask-Security permission, but the permission decorator permissionsrequired was...

5.4CVSS5.5AI score0.00216EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/31 12:00 a.m.19 views

PT-2026-66775

Name of the Vulnerable Software and Affected Versions pgAdmin 4 versions 9.3 through 9.16 Description In SERVER mode, the per-tool permission system fails to consistently enforce permission checks. While a permissions required decorator is used on the initial route of a tool, subsequent backend...

5.4CVSS5.3AI score0.00216EPSS
SaveExploits0References34
Rows per page
Query Builder