Lucene search
+L

627 matches found

Nuclei
Nuclei
added 2026/09/13 2:04 a.m.74 views

pgAdmin 4 - Authentication Bypass

pgAdmin 4 versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data. id: CVE-2024-9014 info: name: pgAdmin 4 - Authentication Bypass author...

9.9CVSS7.9AI score0.09685EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.59 views

pgAdmin < 6.17 - Unauthenticated Remote Code Execution

pgAdmin prior to 6.17 contains an insecure HTTP API caused by improper access control, letting unauthenticated users execute arbitrary external utilities via path manipulation, exploit requires no authentication. id: CVE-2022-4223 info: name: pgAdmin 6.17 - Unauthenticated Remote Code Execution...

8.8CVSS8AI score0.80069EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/12 9:12 p.m.3 views

CVE-2024-3116_RCE_in_pgadmin_8.4

CVE-2024-3116RCEinpgadmin8.4 Making a lab and testing the CVE-2024-3116, a Remote Code Execution in pgadmin 8.4 pip download .whl file 8. Install pgadmin4 : python -m pip install C:\Users\User\Downloads\pgadmin4-8.4-py3-none-any.whl...

9.8CVSS7.2AI score0.65088EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/12 8:33 p.m.5 views

CVE-2024-9014

CVE-2024-9014 - pgAdmin 4 OAuth2 Authentication Bypass Exploit Tools This repository contains tools to check for and exploit the CVE-2024-9014 vulnerability in pgAdmin 4. The vulnerability allows an attacker to bypass OAuth2 authentication and access sensitive resources. Tools 1...

9.9CVSS8.1AI score0.09685EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/12 8:12 p.m.9 views

pgadmin-ai-assistant-sql-injection-cve-2026-17351-lexer-differential-bypass

CVE-2026-17351 — pgAdmin 4 AI Assistant Read-Only Bypass via Lexer Differential PoC for CVE-2026-17351, a critical CVSS 9.0 SQL injection bypass in pgAdmin 4's AI Assistant. Vulnerability Summary pgAdmin 4 versions 9.13 through 9.16 use Python's sqlparse library to validate that LLM-generated SQL...

9.4CVSS5.9AI score0.00407EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 3:47 p.m.9 views

CVE-2024-9014

Esta publicación es un artículo de investigación publicado por EQSTLab. CVE-2024-9014 ★ PoC de Exposición de Información Sensible CVE-2024-9014 ★ Descripción CVE-2024-9014 : Exposición de Información Sensible en pgAdmin4 descripción: las versiones 8.11 y anteriores de pgAdmin son vulnerables a un...

9.9CVSS7.9AI score0.09685EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/12 11:27 a.m.7 views

CVE-2025-2945_PgAdmin_PoC

CVE-2025-2945PoC pgAdmin Proof of Concept pgAdmin Query Tool RCE CVE-2025-2945 – Python Proof of Concept ⚠️ Disclaimer This repository contains a proof-of-concept exploit for CVE-2025-2945, a critical remote code execution vulnerability in pgAdmin 4 versions prior to 9.2. Use this code only in...

9.9CVSS8.4AI score0.563EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/12 3:45 a.m.5 views

pgAdminOpendoor

pgAdminOpendoor CVE-2025-2945 Resumen Esta es mi investigación sobre CVE-2025-2945. Este repositorio incluye un entorno de prueba con PostgreSQL y pgAdmin vulnerable, y el exploit. CVE Enlaces útiles: Detalles NVD Análisis WIZ Metasploit Desglose En el backend de pgAdmin, que está escrito en...

9.9CVSS8.4AI score0.563EPSS
SaveExploits11References1
Kitploit
Kitploit
added 2026/09/10 11:52 p.m.7 views

CVE-2025-13780

CVE-2025-13780: pgAdmin 4 = 8.14 RCE Scanner A comprehensive vulnerability scanner for CVE-2025-13780 , a Remote Code Execution RCE vulnerability in pgAdmin 4 versions ≤ 8.14. 🔍 Vulnerability Details The vulnerability exists in the Restore feature of pgAdmin 4. The application attempts to block...

9.1CVSS8.4AI score0.00943EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/10 11:13 a.m.8 views

CVE-2026-17566

CVE-2026-17566 — pgAdmin 4 Import/Export Data RCE PoC A remote code execution PoC for the pgAdmin 4 Import/Export Data tool. It exploits the divergence in backslash escaping semantics between the isqueryparensbalanced parenthesis checker and psql to inject \copy ... TO PROGRAM and execute arbitra...

9.9CVSS8.2AI score0.00487EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 9:24 a.m.8 views

Blackash-CVE-2025-12762

🔐 CVE-2025-12762 — Vulnerabilidad Crítica de RCE en pgAdmin 4 🚨 ¿Cuál es el problema? Existe una falla de Ejecución Remota de Código RCE en pgAdmin 4 versiones ≤ 9.9. Los atacantes pueden ejecutar comandos arbitrarios en el host cuando pgAdmin se ejecuta en modo servidor y procesa un volcado SQL ...

9.8CVSS8.4AI score0.12308EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 7:18 a.m.10 views

CVE-2025-2945-pgAdmin-RCE

CVE-2025-2945 — pgAdmin 4 Authenticated Query Tool RCE CVSS 3.1: 9.9 Critical · Affects: pgAdmin 4 8.10 – 9.1 · Fixed in: 9.2 April 4, 2025 CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code / Eval Injection A proof-of-concept exploit for CVE-2025-2945, an authenticated...

9.9CVSS8.3AI score0.563EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/08 4:48 a.m.4 views

pgadmin4-9.10-CVE-2025-13780

pgadmin4 9.11 Meta-Command Filter Command Execution Summary The PLAIN restore meta-command filter introduced in pgAdmin as part of the fix for Issue 9320 does not detect meta-commands when a SQL file begins with a UTF-8 Byte Order Mark EF BB BF or other special sequences. The implemented filter...

9.1CVSS8.4AI score0.00943EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/06 8:21 p.m.8 views

CVE-2025-2945-pgadmin-rce

CVE-2025-2945 — RCE autenticado en la herramienta de consulta de pgAdmin 4 Prueba de concepto para CVE-2025-2945, una vulnerabilidad crítica de ejecución remota de código en pgAdmin 4. Versiones afectadas: 8.10 hasta 9.1 Corregido en: 9.2 publicada el 4 de abril de 2025 CVSS v3.1: 9.9 Crítica...

9.9CVSS8.4AI score0.563EPSS
SaveExploits11
RedhatCVE
RedhatCVE
added 2026/08/15 7:23 a.m.11 views

CVE-2026-17350

A flaw was found in pgAdmin 4. In SERVER mode, an authenticated user who has been explicitly denied access to a specific tool by an administrator could still bypass this restriction. This is due to inconsistent enforcement of the per-tool permission system, where backend routes and Socket.IO...

5.4CVSS5.3AI score0.00216EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
added 2026/08/15 7:08 a.m.9 views

CVE-2026-17349

A flaw was found in pgAdmin 4. An authenticated, low-privilege user could exploit a vulnerability in the adhoc server cloning feature to gain unauthorized access to another user's stored database credentials. By initiating an adhoc connection to a shared server owned by another user, the cloning...

9.6CVSS5.4AI score0.00313EPSS
SaveExploits0References6
OPENSUSE Linux
OPENSUSE Linux
added 2026/08/14 12:00 a.m.7 views

pgadmin4-9.17-1.1 on GA media (moderate)

pgadmin4-9.17-1.1 on GA media Announcement ID: openSUSE-SU-2026:11508-1 Rating: moderate Cross-References: CVE-2026-12044 CVE-2026-12045 CVE-2026-12046 CVE-2026-12047 CVE-2026-12048 CVE-2026-12049 CVE-2026-12050 CVE-2026-1707 CVE-2026-17347 CVE-2026-17349 CVE-2026-17350 CVE-2026-17351...

9.9CVSS6.6AI score0.01444EPSS
SaveExploits3
RedhatCVE
RedhatCVE
added 2026/08/12 9:19 a.m.9 views

CVE-2026-17346

A flaw was found in pgAdmin 4. A low-privileged user can exploit a SQL injection vulnerability when object names, such as schema, table, publication, or subscription names, containing special characters are not properly escaped. When any user, including those with higher privileges, views the...

8.8CVSS5.9AI score0.00433EPSS
SaveExploits0References6
GithubExploit
GithubExploit
added 2026/08/10 8:06 p.m.29 views

Exploit for Code Injection in Pgadmin Pgadmin_4

No d...

9.9CVSS8.7AI score0.563EPSS
SaveExploits11
RedhatCVE
RedhatCVE
added 2026/08/03 2:10 p.m.26 views

CVE-2026-17347

A flaw was found in pgAdmin 4. The MASTERPASSWORDHOOK setting, which allows administrators to configure an external command for per-user encryption keys, improperly substitutes usernames into the command string. An authenticated user can exploit this by providing a specially crafted username...

8.8CVSS5.9AI score0.00296EPSS
SaveExploits0References2
Rows per page
Query Builder