GHSA-6WMF-3R64-VCWV vulnerabilities

Vulnerabilities for packages: pghero-fips, pghero...

CVE-2026-61845 vulnerabilities

Vulnerabilities for packages: pghero-fips, pghero...

CVE-2026-63435 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, pghero, ruby3.3-mail, kube-logging-operator, pghero-fips, logstash, commercial-gitlab-rails-ee...

GHSA-MVXR-6M87-MV2Q vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, pghero, ruby3.3-mail, kube-logging-operator, pghero-fips, logstash, commercial-gitlab-rails-ee...

CVE-2026-73648 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, gitlab-rails-ce, pghero, ruby3.4-rails, gitlab-rails-ce-fips, ruby3.3-rails, pghero-fips, commercial-gitlab-rails-ee, ruby3.2-rails, ruby4.0-rails...

CVE-2026-73490 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, gitlab-rails-ce, pghero, ruby3.4-rails, gitlab-rails-ce-fips, ruby3.3-rails, pghero-fips, commercial-gitlab-rails-ee, ruby3.2-rails, ruby4.0-rails...

CVE-2026-73491 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, gitlab-rails-ce, pghero, ruby3.4-rails, gitlab-rails-ce-fips, ruby3.3-rails, pghero-fips, commercial-gitlab-rails-ee, ruby3.2-rails, ruby4.0-rails...

PgHero - Detect

PgHero products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PgHero products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PgHero - Detect', 'description': 'PgHero products was detected....

PgHero Dashboard Exposure Panel - Detect

PgHero Dashboard Exposure panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PgHero Dashboard Exposure panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PgHero Dashboard Exposure Panel...

EUVD-2020-0642

Malware in sbrugna...

EUVD-2023-0557

Malicious code in bioql PyPI...

CVE-2020-16253

The PgHero gem through 2.6.0 for Ruby allows CSRF...

Information Disclosure

pghero is vulnerable to Information Disclosure. The vulnerability exists because the explain function in homecontroller.rb does not properly handle sensitive information in the error message of query results, allowing an attacker to access sensitive information...

Information Exposure

Overview pghero is a performance dashboard for Postgres. Affected versions of this package are vulnerable to Information Exposure via the explain functionality, due to improper validation of the user query, which might result in data leakage from the query error message. Remediation Upgrade pgher...

PgHero Allows Information Disclosure Through EXPLAIN Feature

PgHero before 3.1.0 allows Information Disclosure via EXPLAIN because query results may be present in an error message. Depending on database user privileges, this may only be information from the database, or may be information from file contents on the database server...

GHSA-VF99-XW26-86G5 PgHero Allows Information Disclosure Through EXPLAIN Feature

PgHero before 3.1.0 allows Information Disclosure via EXPLAIN because query results may be present in an error message. Depending on database user privileges, this may only be information from the database, or may be information from file contents on the database server...

CVE-2023-22626

PgHero before 3.1.0 allows Information Disclosure via EXPLAIN because query results may be present in an error message. Depending on database user privileges, this may only be information from the database, or may be information from file contents on the database server...

Information disclosure

PgHero before 3.1.0 allows Information Disclosure via EXPLAIN because query results may be present in an error message. Depending on database user privileges, this may only be information from the database, or may be information from file contents on the database server...

PT-2023-18595 · Pghero · Pghero

Name of the Vulnerable Software and Affected Versions: PgHero versions prior to 3.1.0 Description: The issue allows information disclosure via EXPLAIN, as query results may be present in an error message. Depending on database user privileges, this may disclose information from the database or fr...

CVE-2023-22626: Generation of Error Message Containing Sensitive Information

PgHero before 3.1.0 allows Information Disclosure via EXPLAIN because query results may be present in an error message. Depending on database user privileges, this may only be information from the database, or may be information from file contents on the database server...