CVE-2025-13372: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the kwargs passed to QuerySet.annotate or QuerySet.alias on PostgreSQL. Earlier...

Exploit for OS Command Injection in Postgresql

usage: CVE-2019-9193.py -h -i IP -p PORT -d DATABASE...

[SECURITY] Fedora 42 Update: pgadmin4-9.10-1.fc42

pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...

[SECURITY] Fedora 43 Update: pgadmin4-9.10-1.fc43

pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...

phpPgAdmin Data Export Command Execution

The vulnerability of the dataexport.php web tool of the phpPgAdmin administration tool for PostgreSQL lies in the lack of security measures for SQL query structures. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

phpPgAdmin SQL Injection XSS

The vulnerability of the sql.php web administration tool for PostgreSQL’s phpPgAdmin is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and perform cross-site scripting attacks...

postgresql17-17.7-1.1 on GA media (moderate)

postgresql17-17.7-1.1 on GA media Announcement ID: openSUSE-SU-2025:15786-1 Rating: moderate Cross-References: CVE-2025-12817 CVE-2025-12818 CVSS scores: CVE-2025-12817 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVE-2025-12817 SUSE : 5.3...

postgresql15-15.15-1.1 on GA media (moderate)

postgresql15-15.15-1.1 on GA media Announcement ID: openSUSE-SU-2025:15784-1 Rating: moderate Cross-References: CVE-2025-12817 CVE-2025-12818 CVSS scores: CVE-2025-12817 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVE-2025-12817 SUSE : 5.3...

ROOT-OS-DEBIAN-12-CVE-2025-12818 CVE-2025-12818 in rootio-postgresql-15 - Patched by Root

Root has patched CVE-2025-12818 in the rootio-postgresql-15 package for Root:Debian:12. Multiple fixed versions available...

OPENSUSE-SU-2025:15784-1 postgresql15-15.15-1.1 on GA media

These are all security issues fixed in the postgresql15-15.15-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15783-1 postgresql14-14.20-1.1 on GA media

These are all security issues fixed in the postgresql14-14.20-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15785-1 postgresql16-16.11-1.1 on GA media

These are all security issues fixed in the postgresql16-16.11-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15786-1 postgresql17-17.7-1.1 on GA media

These are all security issues fixed in the postgresql17-17.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15782-1 postgresql13-13.23-1.1 on GA media

These are all security issues fixed in the postgresql13-13.23-1.1 package on the GA media of openSUSE Tumbleweed...

postgresql security update

12.22-5.0.1 - Add backport of CVE-2025-8714 Orabug: 38667546 12.22-5 - Fix previous Backport 12.22-4 - Backport CVE-2025-8715 12.22-3 - Fix backport for CVE-2025-1094 12.22-2 - Backport fix for CVE-2025-1094 12.22-1 - Update to 12.22 - Fixes: CVE-2024-10976 CVE-2024-10978 12.20-1 - Update to 12.2...

PT-2025-54740

These are all security issues fixed in the postgresql15-15.15-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-66260

PostgreSQL SQL Injection statussql.php in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform SQL injection via sw1 and sw2 parameters in statussql.php. The statussql.php endpoint constructs...

CVE-2025-66260

PostgreSQL SQL Injection statussql.php in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform SQL injection via sw1 and sw2 parameters in statussql.php. The statussql.php endpoint constructs...

EUVD-2025-199673

PostgreSQL SQL Injection statussql.php in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform SQL injection via sw1 and sw2 parameters in statussql.php. The statussql.php endpoint constructs...

CVE-2025-66260 PostgreSQL SQL Injection (status_sql.php)

PostgreSQL SQL Injection statussql.php in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform SQL injection via sw1 and sw2 parameters in statussql.php. The statussql.php endpoint constructs...