zuthaka

A collaborative free open-source Command & Control integration framework that allows developers to concentrate on the core function and goal of their C2. Explore the docs » · Report Bug · Request Feature · Table of Contents 1. About The Project Problem statement Solution Built With 2. Already...

CVE-2026-14676

A flaw was found in PostgreSQL pgstatstatements. A local attacker, specifically a query author, could exploit a heap buffer overflow vulnerability by crafting special queries containing array constants. This could allow the attacker to execute arbitrary code as the operating system user running t...

CVE-2026-14669

A heap buffer overflow flaw was found in the PostgreSQL tochartimestamptz function. An attacker can exploit this by supplying an overly long POSIX timezone abbreviation to execute arbitrary code as the database's operating system user, potentially resulting in complete system compromise. Mitigati...

CVE-2019-9193-Home-Lab

CVE-2019-9193 — PostgreSQL COPY FROM PROGRAM RCE Questo lab simula CVE-2019-9193 , una vulnerabilità di PostgreSQL 9.3–11.2 che consente di: root@kitploit: COPY ... FROM PROGRAM '' di eseguire comandi OS se eseguita da un superuser o da un ruolo con pgexecuteserverprogram. Il tuo compito è...

CVE-2019-9193-Postgresql-RCE

uso: CVE-2019-9193.py -h -i IP -p PORTA -d DATABASE -c COMANDO -t TIMEOUT -U UTENTE -P PASSWORD esempio: python3 CVE-2019-9193.py -i 127.0.0.1 -p 5432 -U postgres -c 'id' esempio 2 : python3 CVE-2019-9193.py -h localhost -p 5432 -U postgres -c 'id' output: + Connessione al Database PostgreSQL su...

CVE-2019-9193

EN GenPostgresRCEExploit è uno strumento PoC progettato per sfruttare una vulnerabilità autenticata di esecuzione remota del codice RCE in alcune versioni di PostgreSQL 9.3 - 11.7. Consente agli utenti autenticati di eseguire comandi di sistema su un server di database PostgreSQL vulnerabile a...

CVE-2020-7471-Django

CVE-2020-7471-PoC Django PoC für die SQL-Injection-Schwachstelle in PostgreSQL mit Django, gefunden in Django 1.11 vor 1.11.28, 2.2 vor 2.2.10 und 3.0 vor 3.0.3 Die Klasse django.contrib.postgres.aggregates.StringAgg zur Verwendung der PostgreSQL-STRINGAGG-Funktion wies eine...

CVE-2019-9193

EN GenPostgresRCEExploit هي أداة PoC مصممة لاستغلال ثغرة تنفيذ التعليمات البرمجية عن بُعد RCE التي تتطلب مصادقة في إصدارات معينة من PostgreSQL 9.3 - 11.7. تتيح للمستخدمين الموثّقين تنفيذ أوامر النظام على خادم قاعدة بيانات PostgreSQL المعرّض للثغرة CVE-2019-9193. الميزات استغلال RCE : تنفيذ أوامر...

CVE-2025-1094

Escrevi este exploit com referência ao PoC disponível em CVE-2025-1094 CVE‑2025‑1094 | Vulnerabilidade de Sanitização de Entrada do PostgreSQL Visão Geral CVE‑2025‑1094 é uma vulnerabilidade de sanitização de entrada nas funções de escape do libpq do PostgreSQL e na ferramenta interativa psql. El...

Drupal Core - Anonymous SQL Injection via PostgreSQL Entity Query

Drupal core from 8.9.0 before 10.4.10, 10.5.0 before 10.5.10, 10.6.0 before 10.6.9, 11.0.0 before 11.1.10, 11.2.0 before 11.2.12, and 11.3.0 before 11.3.10 contains an SQL injection caused by improper neutralization of special elements in SQL commands, letting attackers execute arbitrary SQL...

Important: Red Hat Security Advisory: postgresql-jdbc security update

An update for postgresql-jdbc is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

CVE-2026-20253

Splunk Enterprise — CVE-2026-20253 Trainingslabor Splunk Enterprise 10.2.3 · PostgreSQL-Recovery-Sidecar · CWE-306 Fehlende Authentifizierung für kritische Funktion Eine autorisierte, eigenständige Reproduktion, die das reale Advisory modelliert für defensive Ausbildung. Es enthält keinen...

POC_SQL_injection_in_Parse_Server_prior_6.5.7_-_7.1.0

Database Ghost 🔥 Fortgeschrittenes PostgreSQL SQL-Injection-Exploitation-Tool 🚨 HAFTUNGSAUSSCHLUSS NUR FÜR AUTORISIERTE SICHERHEITSTESTS Unbefugte Nutzung ist illegal. Verwenden Sie das Tool nur auf Systemen, die Ihnen gehören oder für deren Tests Sie eine ausdrückliche Genehmigung haben. ⚡...

CVE-2024-27304-PoC

CVE-2024-27304-PoC riferimenti DEF CON 32 - SQL Injection Isn't Dead Smuggling Queries at the Protocol Level - Paul Gerste pgx SQL Injection via Protocol Message Size Overflow webapp Una semplice applicazione web con funzionalità di login. Solo gli amministratori possono accedere. Questa...

CVE-2026-17543-PHP-Exposure-Validator

Validatore di esposizione PHP CVE-2026-17543 Validator sicuro lato rete per verificare la potenziale esposizione a PHP CVE-2026-17543. Questo progetto verifica se un server web remoto espone una versione di PHP interessata da CVE-2026-17543 e può opzionalmente eseguire sonde non distruttive sui...

CVE-2026-76904

GeoServer Injeção de SQL para RCE Zero-Day CVE: CVE-2026-76904 | CVSS: 9.8 Crítico CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Esta vulnerabilidade recebeu o identificador GHSA-mqjf-5f49-2fjh atribuído pela equipe do GeoServer/GeoTools e está sendo ativamente explorada na natureza a partir de...

CVE-2026-76848

TypeORM's SelectQueryBuilder.distinctOn accepts an array of strings and stores it on the expression map without validation. For PostgreSQL-family drivers, createSelectDistinctExpression in src/query-builder/SelectQueryBuilder.ts joins that array and interpolates the result into the generated...

EUVD-2026-64853

TypeORM's SelectQueryBuilder.distinctOn accepts an array of strings and stores it on the expression map without validation. For PostgreSQL-family drivers, createSelectDistinctExpression in src/query-builder/SelectQueryBuilder.ts joins that array and interpolates the result into the generated...

CVE-2026-76848

TypeORM versions 0.2.21 through 1.1.0 are affected by a SQL injection vulnerability in SelectQueryBuilder.distinctOn . The method accepts an array of strings and, for PostgreSQL-family drivers , interpolates them directly into a SELECT DISTINCT ON (…) clause via createSelectDistinctExpression wit...

CVE-2026-9082-Drupal-PoC

CVE-2026-9082 - Drupal Core PostgreSQL SQL Injection PoC Übersicht Dieses Repository stellt einen ethischen Proof-of-Concept PoC für CVE-2026-9082 bereit, eine hochkritische SQL-Injection Schwachstelle in Drupal Core , die alle PostgreSQL-basierten Websites mit Drupal 8.0 bis 11.3.9 betrifft. Der...