CVE-2025-2945_PgAdmin_PoC

CVE-2025-2945PoC pgAdmin Prova di concetto pgAdmin Query Tool RCE CVE-2025-2945 – Prova di concetto in Python ⚠️ Avvertenza Questo repository contiene un exploit proof-of-concept per CVE-2025-2945, una vulnerabilità critica di esecuzione remota di codice in pgAdmin 4 versioni precedenti alla 9.2...

CVE-2025-2945-pgAdmin4-Authenticated-RCE-PoC-

CVE-2025-2945 – pgAdmin4 RCE autenticato PoC Questo repository contiene uno script proof-of-concept creato per la ricerca sulla sicurezza e per test di penetrazione autorizzati riguardanti la vulnerabilità CVE-2025-2945 , che colpisce determinate versioni di pgAdmin4. Il problema consente a un...

cve-2025-2945-poc

pgAdmin4 Query Tool Authenticated RCE PoC Script Python autonomo per sfruttare la vulnerabilità di RCE autenticata nel query tool di pgAdmin4 CVE-2025-2945 nelle versioni di pgAdmin4 8.10 - 9.1. Portato dal modulo Metasploit: pgadminquerytoolauthenticated.rb Riferimenti:...

dnsprobe

Nota - Questo progetto è discontinuato. Nuovi aggiornamenti e correzioni verranno spinti su dnsx. DNSProbe è uno strumento costruito sopra retryabledns che ti consente di eseguire multiple query DNS a tua scelta con una lista di resolver forniti dall'utente. Risorse Risorse Caratteristiche Utiliz...

CVE-2025-2945-pgAdmin-RCE

CVE-2025-2945 — pgAdmin 4 प्रमाणित क्वेरी टूल RCE CVSS 3.1: 9.9 क्रिटिकल · प्रभावित: pgAdmin 4 8.10 – 9.1 · समाधान: 9.2 4 अप्रैल, 2025 CWE-95 गतिशील रूप से मूल्यांकित कोड में निर्देशों का अनुचित तटस्थीकरण / Eval इंजेक्शन CVE-2025-2945 के लिए एक प्रूफ-ऑफ-कॉन्सेप्ट एक्सप्लॉइट, pgAdmin 4 के क्वेरी ट...

CVE-2026-68578

ArcadeDB versions before 26.7.3 fail to bind the authenticated principal in the MCP HTTP transport, causing all engine permission checks to silently pass as no-ops. Non-root MCP-allowed users can perform arbitrary database writes, DDL, schema mutations, and execute arbitrary JavaScript code via t...

pgAdmin 4 Vulnerable to Remote Code Execution

Remote Code Execution security vulnerability in pgAdmin 4 Query Tool and Cloud Deployment modules.The vulnerability is associated with the 2 POST endpoints;/sqleditor/querytool/download, where the querycommited parameter and/cloud/deploy endpoint, where the highavailability parameter isunsafely...

PYSEC-2026-451 pgAdmin 4 Vulnerable to Remote Code Execution

Remote Code Execution security vulnerability in pgAdmin 4 Query Tool and Cloud Deployment modules. The vulnerability is associated with the 2 POST endpoints; /sqleditor/querytool/download, where the querycommited parameter and /cloud/deploy endpoint, where the highavailability parameter is unsafe...

PT-2026-53531

Remote Code Execution security vulnerability in pgAdmin 4 Query Tool and Cloud Deployment modules. The vulnerability is associated with the 2 POST endpoints; /sqleditor/query tool/download, where the query commited parameter and /cloud/deploy endpoint, where the high availability parameter...

Important Photon OS Security Update - PHSA-2026-5.0-0870

Updates of 'jq' packages of Photon OS have been released...

OPENSUSE-SU-2026:10862-1 yq-4.53.2-1.1 on GA media

These are all security issues fixed in the yq-4.53.2-1.1 package on the GA media of openSUSE Tumbleweed...

RHSA-2026:18048 Red Hat Security Advisory: jq security update

Bulletin has no description...

RHSA-2026:18045 Red Hat Security Advisory: jq security update

Bulletin has no description...

jq: stack overflow in module loading on mutual `include`

...

jq: Missing runtime type checks for _strindices lead to crash and limited memory disclosure

...

Exploit for Code Injection in Pgadmin Pgadmin_4

CVE-2025-2945 — pgAdmin 4 Query Tool Authenticated RCE Proof...

GO-2026-4641 WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora...

CVE-2026-30859

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, a broken access control vulnerability in the database query tool allows any authenticated tenant to read sensitive data belonging to other tenants, including API keys, mod...

CVE-2026-30860 WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, a remote code execution RCE vulnerability exists in the application's database query functionality. The validation system fails to recursively inspect child nodes within...

WeKnora 访问控制错误漏洞

WeKnora is an open-source framework based on LLM developed by Tencent. It features deep document understanding using the RAG paradigm, semantic retrieval, and context-aware answers. Prior to version 0.2.12, WeKnora had an access control vulnerability. This vulnerability stemmed from an access...