hakuin

Hakuin is a Blind SQL Injection BSQLI optimization and automation framework written in Python 3. It abstracts away the extraction logic and allows users to easily and efficiently dump databases from vulnerable web applications. To speed up the process, Hakuin utilizes a variety of optimization...

novahot

novahot novahot is a webshell framework for penetration testers. It implements a JSON-based API that can communicate with trojans written in any language. By default, it ships with trojans written in PHP, ruby, and python. Beyond executing system commands, novahot is able to emulate interactive...

SUSE CVE-2026-116241

pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy ... TO command and checks that the query's parentheses are balanced so that nothing can escape the wrapper. The check rejected a backslash inside a single-quoted string, but not inside a double-quoted identifier, wher...

CVE-2026-17566

CVE-2026-17566 — pgAdmin 4 Import/Export Data RCE PoC A remote code execution PoC for the pgAdmin 4 Import/Export Data tool. It exploits the divergence in backslash escaping semantics between the isqueryparensbalanced parenthesis checker and psql to inject \copy ... TO PROGRAM and execute arbitra...

CVE-2025-1094-Lab-Setup

🛠️ CVE-2025-1094 Lab Setup ⚠️ Disclaimer This lab is for educational and research purposes only. Do NOT use any of the information or techniques demonstrated here on systems you do not own or have explicit permission to test. Unauthorized use of these methods may violate laws and result in severe...

CVE-2025-1094

I have written this exploit with reference to the PoC available at CVE-2025-1094 CVE‑2025‑1094 | PostgreSQL Input Sanitization Vulnerability Overview CVE‑2025‑1094 is an input sanitization vulnerability in PostgreSQL’s libpq escape functions and the psql interactive tool. It stems from the improp...

CVE-2025-8714-POC

CVE-2025-8714-POC PoC de RCE en PostgreSQL — CVE-2025-8714 PoC de Ejecución Remota de Código en PostgreSQL — CVE-2025-8714 pgdump Reverse Shell Este repositorio presenta una prueba de concepto PoC para la vulnerabilidad crítica CVE-2025-8714 que afecta a versiones PostgreSQL anteriores a: 17.6,...

POC-CVE-2025-1094

POC CVE-2025-1094: PostgreSQL psql SQL Injection Proof of Concept for critical SQL Injection vulnerability in PostgreSQL client libpq and psql tool 📋 Table of Contents 1. Vulnerability Overview 2. Project Directory Structure 3. Attack Payload Analysis 4. Usage Guide 5. Mitigation & Prevention 1...

CVE-2026-116252

pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname argument unchanged. libpq treats a --dbname value containing "=" or a postgresql:// URI as a full connection string, whose keywords override the host, port and other settings pgAdmin had supplied. A databas...

CVE-2026-116241

pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy ... TO command and checks that the query's parentheses are balanced so that nothing can escape the wrapper. The check rejected a backslash inside a single-quoted string, but not inside a double-quoted identifier, wher...

CVE-2026-116252

pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname argument unchanged. libpq treats a --dbname value containing "=" or a postgresql:// URI as a full connection string, whose keywords override the host, port and other settings pgAdmin had supplied. A databas...

EUVD-2026-114393

pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname argument unchanged. libpq treats a --dbname value containing "=" or a postgresql:// URI as a full connection string, whose keywords override the host, port and other settings pgAdmin had supplied. A databas...

CVE-2026-116252

pgAdmin 4 versions before 9.19 are vulnerable to a security flaw where the materialized view refresh function passes the target database's name to the psql command's --dbname argument without modification. Because libpq interprets values containing = or postgresql:// URIs as full connection strin...

CVE-2026-116252 pgAdmin 4: Materialized view refresh redirects its connection through a crafted database name

pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname argument unchanged. libpq treats a --dbname value containing "=" or a postgresql:// URI as a full connection string, whose keywords override the host, port and other settings pgAdmin had supplied. A databas...

CVE-2026-116252 pgAdmin 4: Materialized view refresh redirects its connection through a crafted database name

pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname argument unchanged. libpq treats a --dbname value containing "=" or a postgresql:// URI as a full connection string, whose keywords override the host, port and other settings pgAdmin had supplied. A databas...

CVE-2026-116246

In pgAdmin 4 versions prior to 9.19 , a vulnerability exists where the server manager writes server passwords into the shared process environment (as PGPASSWORD or per-process variables) for psql and other background utilities. Because this environment is shared across all user requests and inher...

CVE-2026-116241

The pgAdmin 4 Import/Export Data tool is vulnerable to OS Command Injection in versions before 9.19 . The vulnerability arises because the application fails to correctly validate backslashes inside double-quoted identifiers when wrapping user queries in a psql usy (...) TO command. Specifically,...

CVE-2026-116241

pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy ... TO command and checks that the query's parentheses are balanced so that nothing can escape the wrapper. The check rejected a backslash inside a single-quoted string, but not inside a double-quoted identifier, wher...

CVE-2026-116241 pgAdmin 4: Import/Export Data query export runs a command through a backslash in a double-quoted identifier

pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy ... TO command and checks that the query's parentheses are balanced so that nothing can escape the wrapper. The check rejected a backslash inside a single-quoted string, but not inside a double-quoted identifier, wher...

EUVD-2026-114382

pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy ... TO command and checks that the query's parentheses are balanced so that nothing can escape the wrapper. The check rejected a backslash inside a single-quoted string, but not inside a double-quoted identifier, wher...