LInux-Kernel-InfoLeak-6.12.-Leveraged-to-do-cross-container-info-leak.-

LInux-Kernel-InfoLeak-6.12.-Leveraged-to-do-cross-container-info-leak.- POC shows how to leak postgresql stuff cause hugefile sub-system. Based on https://x.com/spendergrsec/status/1993794163880718700?s=20...

CVE-2018-1058

CVE-2018-1058 — PostgreSQL Search Path Demonstration This repository contains the final report and the reproducibility artifacts for: CVE-2018-1058: Privilege Escalation in PostgreSQL through Uncontrolled Search Path The goal is to demonstrate the search-path trust failure behind CVE-2018-1058...

Azure Database for PostgreSQL Elevation of Privilege Vulnerability

Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network...

ROOT-APP-MAVEN-CVE-2026-42198 CVE-2026-42198 in org.postgresql:postgresql - Patched by Root

Root has patched CVE-2026-42198 in the org.postgresql:postgresql package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-1597 CVE-2024-1597 in org.postgresql:postgresql - Patched by Root

Root has patched CVE-2024-1597 in the org.postgresql:postgresql package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2022-41946 CVE-2022-41946 in org.postgresql:postgresql - Patched by Root

Root has patched CVE-2022-41946 in the org.postgresql:postgresql package for Root:Maven. Multiple fixed versions available...

CVE-2026-20253

CVE-2026-20253 实验环境 Splunk Enterprise 通过 PostgreSQL Sidecar 服务实现预认证 RCE | ---|--- CVE| CVE-2026-20253 CVSS| 9.8 严重 类型| 未认证远程代码执行 CWE| CWE-306: 关键功能缺少身份验证 产品| Splunk Enterprise 10.0.x / 10.2.x 免责声明 ：本实验环境仅用于授权的安全研究、教育和渗透测试。请勿对您不拥有或未获得明确授权测试的系统使用。 实验架构 root@kitploit:...

poc_cve-2026-42208

CVE-2026-42208 — LiteLLM Pre-Authentication SQL Injection A lab environment for reproducing and detecting CVE-2026-42208 , a critical pre-authentication SQL injection vulnerability in LiteLLM where unsanitized Bearer tokens reach a raw PostgreSQL query. Vulnerability Overview...

POC-CVE-2025-1094

POC CVE-2025-1094: PostgreSQL psql SQL Injection Proof of Concept for critical SQL Injection vulnerability in PostgreSQL client libpq and psql tool 📋 Table of Contents 1. Vulnerability Overview 2. Project Directory Structure 3. Attack Payload Analysis 4. Usage Guide 5. Mitigation & Prevention 1...

CVE-2026-2005_lab

CVE-2026-2005 — PostgreSQL pgcrypto 堆溢出实验环境 一个自包含的 Docker 实验环境，用于练习利用 CVE-2026-2005——PostgreSQL pgcrypto 扩展中的堆缓冲区溢出漏洞，该漏洞可在无需超级用户权限的情况下实现远程代码执行。 受影响版本： PostgreSQL ≤ 17.7 / 16.11 / 15.15 / 14.20 / 18.1 修复版本： 18.2, 17.8, 16.12, 15.16, 14.21（发布于 2026-02-12） 环境搭建 前置要求： Docker、Docker Compose...

cve-2026-2005

CVE-2026-2005 — PostgreSQL pgcrypto 堆溢出 → RCE 通过单个 SQL 查询针对 PostgreSQL 的 pgcrypto 扩展实现远程代码执行。该漏洞是 pgpparsepubencsesskey 中的堆缓冲区溢出，可破坏 PostgreSQL 内部 MemoryContext 分配器的元数据，从而以 postgres 用户身份实现任意代码执行。 | ---|--- CVE| CVE-2026-2005 组件| contrib/pgcrypto/pgp-pubdec.c CWE| CWE-122（基于堆的缓冲区溢出） CVSSv3.1| 8.8...

CVE-2026-23980-Exploit

CVE-2026-23980 - Apache Superset 认证后 SQL 注入 root@kitploit: / \ | | | | | || | \\ sqlExpression 直接进入查询。没有参数化。没有希望。 Apache Superset ChartDataRestApi.data - QueryContext.getdfpayload - SqlaTable.getsqlaquery - adhoc 列 sqlExpression / extras.where 注入 - validateadhocsubquery 通过 querytoxml 被绕过 - 原始 SQL...

CVE-2026-21643

CVE-2026-21643 检测器与 Nuclei 模板 本仓库包含针对 CVE-2026-21643 的检测工具，这是 FortiClient EMS 7.4.4 中的一个预认证 SQL 注入漏洞。 该漏洞存在于 /api/v1/initconsts 和 /api/v1/auth/signin 端点中，其中 Site HTTP 头未经清理直接传入 PostgreSQL 的 SET searchpath 查询。 内容 cve202621643.py：一个 Python 脚本，使用基于错误（安全）和基于时间（会导致锁定）的方法检查该漏洞。 CVE-2026-21643.yaml：一个...

Oracle Linux 9 : postgresql:18 (ELSA-2026-67848)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-67848 advisory. - Fix backport regression in STFromFlatGeobufToTable CVE-2026-73515 patch - Backported a patch to fix a security vulnerability CVE-2026-73515 Tenable...

AlmaLinux 9 : postgresql:18 (ALSA-2026:67848)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:67848 advisory. postgresql: PostgreSQL: SQL injection in pgcreatesubscriber allows arbitrary SQL execution as superuser CVE-2026-6476 postgresql: PostgreSQL: Arbitrary...

AlmaLinux 10 : postgresql18 (ALSA-2026:67280)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:67280 advisory. postgresql: PostgreSQL: SQL injection in pgcreatesubscriber allows arbitrary SQL execution as superuser CVE-2026-6476 postgresql: PostgreSQL: Arbitrary...

CVE-2026-75513 Marten: SQL injection in Marten's LINQ provider via unescaped string literals

Marten is a .NET Transactional Document DB and Event Store on PostgreSQL. From version 7.0.0 until 9.13.0, several Marten LINQ and tenant-management paths interpolate runtime, potentially attacker-controlled strings into single-quoted SQL literals without escaping or parameterization. The primary...

RLSA-2026:67848 Important: postgresql:18 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: SQL injection in pgcreatesubscriber allows arbitrary SQL execution as superuser CVE-2026-6476 postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector an...

postgresql:18 security update

An update is available for module.pgvector, module.pgrepack, module.postgres-decoderbufs, module.pgaudit, pgrepack, postgis, module.postgis, pgvector, postgres-decoderbufs, postgresql, pgaudit, module.postgresql. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base...

CVE-2026-9082

Drupal CVE-2026-9082 扫描器 半被动扫描器，用于检测可能受 CVE-2026-9082（PostgreSQL SQL注入）影响的 Drupal 安装。 不发送 SQL 有效载荷。不进行改变状态的请求。 受影响版本 分支| 受影响版本| 修复版本 ---|---|--- 10.4.x| 8.9.0 — 10.4.9| 10.4.10 10.5.x| 10.5.0 — 10.5.9| 10.5.10 10.6.x| 10.6.0 — 10.6.8| 10.6.9 11.1.x| 11.0.0 — 11.1.9| 11.1.10 11.2.x| 11.2.0 —...