The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

cve_manager

Project Description A collection of python apps and shell scripts to email an xlsx spreadsheet of new vulnerabilities in the NIST CVE database and their associated products on a daily schedule. The spreadsheet can then be manually interpreted for risk to your specific organization. Based off of a...

rails-cve-2017-17917

rails-cve-2017-17917 이 프로젝트는 id 매개변수의 SQL 인젝션 취약점 복제를 시연하고, 이후 이 보안 문제를 완화하고 해결하는 방법에 대한 통찰력을 제공합니다. https://www.cvedetails.com/cve/CVE-2017-17917/?q=CVE-2017-17917 스택 : root@kitploit: Ruby: 3.2.2 Rails: 7.0.8 Docker 24.0.5 Docker-Compose 1.29.2 PostgreSQL CVE-2017-17917 저희는 이 CVE를 선택하여 최신 Rails...

CVE-2026-14668

A flaw was found in PostgreSQL. This vulnerability, stemming from a type confusion issue in the ctid data type selectivity estimator, could allow an authenticated object creator to access and potentially recover sensitive information from memory. By manipulating input, an attacker could gain...

POC-CVE-2025-1094

POC CVE-2025-1094: PostgreSQL psql SQL Injection Proof of Concept for critical SQL Injection vulnerability in PostgreSQL client libpq and psql tool 📋 Table of Contents 1. Vulnerability Overview 2. Project Directory Structure 3. Attack Payload Analysis 4. Usage Guide 5. Mitigation & Prevention 1...

CVE-2020-7471-Django

CVE-2020-7471-PoC Django PoC for the SQL injection vulnerability in PostgreSQL with Django, found in Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 The class django.contrib.postgres.aggregates.StringAgg for using the PostgreSQL STRINGAGG function had a SQL injection...

CVE-2026-52887-NocoBase-SQLi-RCE

CVE-2026-52887 — NocoBase SQL 삽입 → PostgreSQL 슈퍼유저 RCE NocoBase의 @nocobase/plugin-notification-in-app-message ≤ 2.0.60에 포함된 myInAppChannels:list 액션에서 SQL 삽입이 발생합니다. filterlatestMsgReceiveTimestamp$lt 요청 파라미터는 이스케이프나 바인딩 없이 원시 Sequelize.literal SQL 문자열에 직접 보간됩니다. PostgreSQL pg 드라이버의 스택드 스테이트먼트 지원을...

GoEnumerator

ABOUT GoEnumerator GoEnumerator is a tool I'm writing for the fun of it but to also use for my own enumeration, so I will be keep adding more features to try to speed up the first steps on any CTF enumeration or profesional pentest, as I will add features and options to make the tool to not trigg...

CVE-2019-9193

CVE-2019–9193 - PostgreSQL 9.3-12.3 Authenticated Remote Code Execution Proof of Concept PostgreSQL Database from version 9.3 to 12.3 latest tested are vulnerable to Authenticated Remote Code Execution. Even if it isn't considered to be a vulnerability itself by the development team, this could b...

poc_cve-2026-42208

CVE-2026-42208 — LiteLLM 사전 인증 SQL 인젝션 LiteLLM에서 정제되지 않은 Bearer 토큰이 원시 PostgreSQL 쿼리에 도달하는 치명적인 사전 인증 SQL 인젝션 취약점인 CVE-2026-42208 을 재현하고 탐지하기 위한 랩 환경입니다. 취약점 개요...

mapXplore

mapXplore Español mapXplore is a modular application that imports data extracted of the sqlmap to PostgreSQL or SQLite database. Its main features are: Import of information extracted from sqlmap to PostgreSQL or SQLite for subsequent querying. Sanitized information, which means that at the time ...

CVE-2026-14671

A flaw was found in PostgreSQL. A type confusion vulnerability in the 'refint' module allows an object creator to execute arbitrary code as the operating system user running the database. This could lead to a complete compromise of the database server. Mitigation To mitigate this vulnerability,...

CTF_CVE-2020-7471

DOBBYISFREE! CTF: 2020 Christmas CTF Category: WEB Keyword: DOBBYISFREE! Difficulty: ★★★☆☆ Background Since web hackers usually study SQL Injection on MySQL, I created this problem using PostgreSQL so that they can experience attacks on various databases. Solution Intended Solution Since the...

cve-2026-9082

CVE-2026-9082 유형 : SQL 인젝션 CWE-89 영향받는 제품 : Drupal Core Database Abstraction API Drupal 권고 : SA-CORE-2026-004 게시일 : 2026년 5월 20일 심각도 : 매우 치명적 Drupal 20/25 | NVD CVSS 6.5 무엇인가요? CVE-2026-9082는 Drupal 코어 데이터베이스 추상화 API의 SQL 인젝션 취약점입니다. Drupal의 DB 계층은 PDO를 래핑하고 모든 쿼리가 데이터베이스에 도달하기 전에 정화합니다. 이 취약점은...

Apache Superset < 4.0.2 - SQL Injection

An SQL Injection vulnerability in Apache Superset exists due to improper neutralization of special elements used in SQL commands. Specifically, certain engine-specific functions are not checked, which allows attackers to bypass Apache Superset's SQL authorization. To mitigate this, a new...

Drupal Core - Anonymous SQL Injection via PostgreSQL Entity Query

Drupal core from 8.9.0 before 10.4.10, 10.5.0 before 10.5.10, 10.6.0 before 10.6.9, 11.0.0 before 11.1.10, 11.2.0 before 11.2.12, and 11.3.0 before 11.3.10 contains an SQL injection caused by improper neutralization of special elements in SQL commands, letting attackers execute arbitrary SQL...

CVE-2026-9082

CVE-2026-9082 Неаутентифицированная SQL-инъекция в Drupal Core на PostgreSQL через POST /user/login, расширяемая до удаленного выполнения кода через sessionpreloadlibraries PostgreSQL. В отличие от существующих публичных эксплойтов, нацеленных на JSON:API, этот использует конечную точку входа —...

darwis-taxii

DARWIS TAXII A high-performance TAXII Trusted Automated eXchange of Indicator Information server written in Rust. Rust port of EclecticIQ OpenTAXII with full database compatibility. Features TAXII 1.x - Discovery, Poll, Inbox, Collection Management, Subscriptions TAXII 2.1 - Full REST API with...

django_cve_2019_19844_poc

djangocve201919844poc PoC для CVE-2019-19844 Требования Python 3.7.x PostgreSQL 9.5 или выше Установка 1. Создайте базу данных например, djangocve201919844poc 2. Задайте имя базы данных через переменную окружения DJANGODATABASENAME например, export DJANGODATABASENAME=djangocve201919844poc 3...